| 제목 | SourceCodester Sourcecodester Car Driving School Management System 1.0 Cross Site Scripting |
|---|
| 설명 | In the system_info\index.php file, the user input is not filtered or escaped, and is directly spliced into the SQL statement for storage and execution. As a result, the attacker can insert malicious script statements to cause malicious XSS execution of any user. |
|---|
| 원천 | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Sourcecodester%20Online%20Catering%20Reservation%20System%20XSS-1.md |
|---|
| 사용자 | BFS-Lab (UID 73306) |
|---|
| 제출 | 2024. 08. 10. AM 10:27 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 08. 10. PM 06:36 (8 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 274129 [SourceCodester Car Driving School Management System 1.0 SystemSettings.php?f=update_settings update_settings_info contact/address 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 18 |
|---|