| 제목 | SOURCECODESTER Flashcard Quiz App Using PHP and MySQL 1.0 Cross Site Scripting |
|---|
| 설명 | There is no input sanitization present when updating flashcards, making the web application vulnerable to XSS.
Allows XSS by placing untrusted code on the parameters question and answer.
Payload used is %3Cscript%3Ealert%28%27reigz+was+here%27%29%3C%2Fscript%3E for both parameters.
Affected endpoint is /flashcard-quiz/endpoint/update-flashcard.php
POC and additional information is available on github |
|---|
| 원천 | ⚠️ https://github.com/smurf-reigz/security/blob/main/proof-of-concepts/SOURCECODESTER%20%5BFlashcard%20Quiz%20App%20Using%20PHP%20and%20MySQL%5D%20XSS%20on%20update-flashcard.php.md |
|---|
| 사용자 | reiginald (UID 64219) |
|---|
| 제출 | 2024. 02. 29. AM 02:06 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 03. 01. AM 08:28 (1 day later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 255387 [SourceCodester Flashcard Quiz App 1.0 update-flashcard.php question/answer 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 19 |
|---|