제출 #396895: SourceCodester Daily Calories Monitoring Tool 1.0 Cross Site Scripting
| 제목 | SourceCodester Daily Calories Monitoring Tool 1.0 Cross Site Scripting |
|---|---|
| 설명 | The calorie_date, calorie_name parameters are vulnerable to the tested XSS payload: <IMG """"><SCRIPT>alert("XSS")</SCRIPT>"> . The code catches a PDOException and directly echoes the error message using $e->getMessage(). If an attacker can manipulate the database interaction to cause an error that includes malicious script content, that content would be output directly to the user's browser. |
| 원천 | ⚠️ https:/ |
| 사용자 | jadu101 (UID 70632) |
| 제출 | 2024. 08. 23. PM 02:34 (2 연령 ago) |
| 모더레이션 | 2024. 08. 24. AM 12:28 (10 hours later) |
| 상태 | 수락 |
| VulDB 항목 | 275721 [SourceCodester Daily Calories Monitoring Tool 1.0 add-calorie.php calorie_date/calorie_name 크로스 사이트 스크립팅] |
| 포인트들 | 20 |