| 제목 | pihome-shc PiHome HVAC 2.0 Cross Site Scripting |
|---|
| 설명 | The web application is vulnerable to XSS attacks within the home.php. Attackers can exploit this vulnerability by injecting malicious payload in the url and steal cookies if the cookie flags are not set properly.
The code below shows (home.php from line 26) that the user input is put into the html source without sanitation. This is a high risk vulnerability.
```php
if(isset($_GET['page_name'])) {
$page_name = $_GET['page_name'];
} else {
$page_name = "homelist";
}
include("header.php");
echo '<div class="container-fluid">
<br>
<input type="hidden" id="page_link" value="'.$page_name.'">
```
The developer should escape all input properly. This is a repository wide issue. |
|---|
| 원천 | ⚠️ https://www.singto.io/pocsforexploits/pihomehvac_xss_home.md |
|---|
| 사용자 | Jelle Janssens (UID 81048) |
|---|
| 제출 | 2025. 02. 17. AM 08:59 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 02. 27. AM 09:53 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 297830 [pihome-shc PiHome 2.0 /home.php page_name 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|