| 제목 | PHPGurukul Hospital-Management-System 4.0 Cross Site Scripting |
|---|
| 설명 | A critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the edit-patient.php file of PHPGurukul's Hospital Management System (v4.0).
Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the profile page is viewed. |
|---|
| 원천 | ⚠️ https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-Stored-XSS/blob/main/stored-xss-exploit.md |
|---|
| 사용자 | Subhash Paudel (UID 66830) |
|---|
| 제출 | 2025. 06. 02. PM 04:49 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 03. PM 10:51 (1 day later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 311046 [PHPGurukul Hospital Management System 4.0 POST Parameter edit-patient.php?editid=2 patname 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 18 |
|---|