| 제목 | PHPGurukul Online Banquet BooKing System 1.0 Cross Site Scripting |
|---|
| 설명 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in the userpassword cookie parameter of the Online Banquet BooKing System.
An attacker can inject malicious JavaScript into the userpassword cookie, which is reflected unsanitized in the login page (admin/login.php).
The script executes immediately when a victim opens the page, leading to code execution in the user's browser context. |
|---|
| 원천 | ⚠️ https://github.com/LagonGit/ReportCVE/issues/3 |
|---|
| 사용자 | Longlagon (UID 88119) |
|---|
| 제출 | 2025. 07. 19. AM 10:24 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 21. AM 08:25 (2 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 317054 [PHPGurukul Online Banquet Booking System 1.0 /admin/login.php user_login/userpassword 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|