| 제목 | Medicine Tracker System-XSS injection vulnerability |
|---|
| 설명 | In the Medicine Tracker System, users are allowed to record their daily medication status for easy tracking, but the system has an XSS vulnerability that is rated as medium risk.
The vulnerability is in the user's daily medication interface, where users can perform storage row XSS injection when adding new drugs as long as they log in. The destination address is: http://localhost/php-mts/app/?page=medicines
The test code is: alert ("xss success!")
This vulnerability has an effect on both the title and content, and if maliciously exploited, it may lead to user data theft. |
|---|
| 원천 | ⚠️ https://github.com/cojoben/coco/blob/main/README.md |
|---|
| 사용자 | joben (UID 43447) |
|---|
| 제출 | 2023. 03. 21. AM 10:55 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 22. PM 12:00 (1 day later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 223292 [SourceCodester Medicine Tracker System 1.0 manage_medicine name/description 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|