| 제목 | codeastro ExpenseManagement-PHP 1 XSS |
|---|
| 설명 | An XSS vulnerability stored in ExpenseManagement-PHP has been identified,which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.
This vulnerability is a type of stored Cross-Site Scripting (XSS), a web security loophole that permits an attacker to insert malicious JavaScript or HTML code into a reputable web application. The vulnerability specifically affects the attachment preview feature. It allows an attacker to upload a malicious HTML file containing JavaScript code.
software：
https://codeastro.com/expense-management-system-in-php-with-source-code/ |
|---|
| 원천 | ⚠️ https://docs.qq.com/doc/DYmhqV3piekZ5dlZi |
|---|
| 사용자 | Mooooon (UID 61604) |
|---|
| 제출 | 2024. 01. 29. AM 03:52 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 01. 29. PM 03:02 (11 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 252304 [CodeAstro Expense Management System 1.0 Add Expenses Page 5-Add-Expenses.php item 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|