| 제목 | code-projects Pharmacy Management System 1.0 Code Injection |
|---|
| 설명 | An HTML Reflect vulnerability has been identified in the Pharmacy Management System version 1.0, specifically during the customer information update process. The issue arises due to the lack of proper sanitization on the address parameter. Malicious input provided through this parameter is reflected directly in the HTML response, enabling attackers to inject HTML or JavaScript content into the page.
Although the severity of this vulnerability is categorized as low, it can still be exploited for phishing attacks, content spoofing, or user interface manipulation. This could lead to misleading information being presented to users, causing reputational damage or enabling social engineering attacks. Immediate action is recommended to mitigate the risk, even though it does not pose a critical security threat. |
|---|
| 원천 | ⚠️ https://gist.github.com/higordiego/e5b7cd1e1c29eb53dc6685c0ceb51470 |
|---|
| 사용자 | c4ttr4ck (UID 75518) |
|---|
| 제출 | 2024. 10. 19. PM 07:26 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 10. 20. PM 08:49 (1 day later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 281023 [code-projects Pharmacy Management System 1.0 Manage Customer Page /manage_customer.php suppliers_name/address 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|