| 제목 | Simple Parking Management System 1.0 Reflected Cross-Site Scripting |
|---|
| 설명 | Simple Parking Management System is vulnerable to Reflected cross-site scripting.
Cross-Site Scripting (XSS) is an attack whereby client-side scripts are injected into a webpage and are subsequently viewed by another user. An attacker can therefore leverage this issue to attack other users.
XSS can be leveraged to carry out an array of attacks against application users such as accessing sensitive application data, logging user keystrokes, or obtaining user passwords stored in the browser.
This particular vulnerability is reflected XSS, which involves exploiting a URL parameter of a website page to return a response that contains a malicious payload. This payload is then executed in the victim's browser when they navigate to the vulnerable URL.
It was possible for an **authenticated** attacker to conduct cross-site scripting attacks. |
|---|
| 원천 | ⚠️ https://github.com/CyberThoth/CVE/blob/eea3090b960da014312f7ad4b09aa58d23966d77/CVE/Simple%20Parking%20Management%20System/Cross%20Site%20Scripting(Refelected)/POC.md |
|---|
| 사용자 | cyberthoth (UID 28322) |
|---|
| 제출 | 2022. 07. 10. AM 04:25 (4 연령 ago) |
|---|
| 모더레이션 | 2022. 07. 10. AM 08:48 (4 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 203420 [SourceCodester Simple Parking Management System 1.0 searching search 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|