| 제목 | Realce Tecnologia Queue ticket kiosk web application N/A Cross Site Scripting |
|---|
| 설명 | Title: Realce Tecnologia queue ticket kiosk login page vulnerable to Reflected XSS vulnerability
Software affected: Realce tecnologia web application in queue ticket kiosk (There is no version in the application pages)
Vendor: Realce Tecnologia - https://www.realcetecnologia.com.br/
Description:
The login page of the queue ticket kiosk's web application reflects unsanitized user input back to the browser without proper escaping or encoding, leading to a reflected cross-site scripting (XSS) vulnerability.
Technical Details:
An attacker can craft a malicious URL with JavaScript code in username parameter, which gets executed in the victim’s browser if the user clicks the link.
Impact:
This allows attackers to execute arbitrary JavaScript in the context of the user’s session, potentially leading to phishing, session hijacking, or redirection to malicious sites.
The exploitation evidences will be sent by e-mail. |
|---|
| 사용자 | Anonymous User |
|---|
| 제출 | 2025. 05. 17. PM 04:38 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 05. 25. PM 07:14 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 310265 [Realce Tecnologia Queue Ticket Kiosk 까지 20250517 Admin Login Page /adm/index.php Usuário 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|