| 제목 | Project Worlds Student Project Allocation System 1.0 reflected Cross-Site Scripting (XSS) at admin_login.php |
|---|
| 설명 | ## Vulnerability Details
The Admin Login module in the Project Allocation System developed by the Project Allocation System is found to have a security vulnerability that exposes it to reflected Cross-Site Scripting (XSS) attacks. This vulnerability allows an attacker to inject malicious scripts into the application, potentially leading to unauthorized access, data theft, or other security breaches.
XSS Vulnerability
- **Location:** `admin/admin_login.php`
- **Vulnerable Parameter:** `msg`
https://localhost/Project-Allocation-System/admin/admin_login.php?msg=test%22%3Cscript%3Ealert(%27Torada%27)%3C/script%3E
There's a full report attached at the advisory |
|---|
| 원천 | ⚠️ https://torada.notion.site/Reflected-Cross-site-scripting-at-Project-Allocation-System-d94c7c489c2d48efa23b21a90dd0e03f?pvs=4 |
|---|
| 사용자 | torada (UID 61170) |
|---|
| 제출 | 2024. 01. 15. PM 04:49 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 01. 19. AM 11:21 (4 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 251549 [Project Worlds Student Project Allocation System 1.0 Admin Login admin_login.php msg 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|