| 제목 | code-projects E-Commerce Site 1.0 Reflected XSS |
|---|
| 설명 | The vulnerability occurs in the search.php page, where user input from the keyword parameter is embedded directly into the HTML output without proper sanitization or encoding. This allows attackers to craft malicious JavaScript that executes in the victim’s browser, leading to cookie theft, session hijacking, phishing, and more. |
|---|
| 원천 | ⚠️ https://github.com/BalanceLee/CVE/issues/4 |
|---|
| 사용자 | balancelee (UID 87843) |
|---|
| 제출 | 2025. 07. 14. AM 09:04 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 17. PM 12:38 (3 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 249096 [code-projects E-Commerce Site 1.0 search.php keyword 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|