| 제목 | GitHub Saruf-Ratul/HR-Payroll-Management-System 1.0 Cross Site Scripting |
|---|
| 설명 | ### VULNERABILITY DESCRIPTION:
A **Stored Cross-Site Scripting (XSS)** vulnerability was discovered in the **HR-Payroll-Management-System** . The application fails to properly sanitize or neutralize user-supplied input before rendering it back onto the webpage. An attacker can exploit this weakness by injecting a malicious script into the vulnerable input box **chat** located within the `chat.php` script. This allows the execution of arbitrary JavaScript code in the context of an unsuspecting user's browser session whenever they view the affected account profile page.
### PROOF OF CONCEPT (PoC) / REPRODUCTION STEPS:
1. clone the reporsitory by the below command
`git clone https://github.com/Saruf-Ratul/HR-Payroll-Management-System.git`
2. Then create an database and then fill the database with the sql file in the repository
`mariadb -e "CREATE DATABASE IF NOT EXISTS payrollmanage;"`
`mariadb payrollmanage < Online-Payroll-Management-System/payrollmanage.sql`
3. Then replace the chat.php file with the below file
[chat.php](https://gist.github.com/dext34-morgan/63b90dcb293789542e49b6d1d1728882)
4. Then start the php web server with the below command
`php -S localhost:8000`
5. Then login with the below credentials
Username - [email protected]
Password - Admin@123
6. Then visit the below url...
http://localhost:8000/chat.php?id=2
7. Then add the payload in the start typing box and then hit the send button
Payload:
```"<script>alert(document.cookie)</script>```
<img width="2878" height="1722" alt="Image" src="https://github.com/user-attachments/assets/ee5a10dd-255a-432b-8804-3196095c058b" />
8. Then an alert box will appear with the cookie id
<img width="2880" height="806" alt="Image" src="https://github.com/user-attachments/assets/5896cbf1-bfd9-46db-988a-839d2a6d80fa" />
And this is Stored XSS so even after stopping the webserver the vulnerability is still exploited. Fix the vulnerability as soon as possible.
|
|---|
| 원천 | ⚠️ https://github.com/Saruf-Ratul/HR-Payroll-Management-System/issues/1 |
|---|
| 사용자 | dexter-morgan (UID 100687) |
|---|
| 제출 | 2026. 10. 11. PM 12:28 (16 날 ago) |
|---|
| 모더레이션 | 2026. 10. 26. PM 07:12 (15 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 426581 [Saruf-Ratul HR-Payroll-Management-System chat.php id 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|