| 제목 | code-projects Simple Car Rental System 1.0 Cross Site Scripting |
|---|
| 설명 | A Stored Cross-Site Scripting (Stored XSS) vulnerability was found in the /admin/add_vehicles.php file of code-projects Simple Car Rental System 1.0. This vulnerability exists because the application fails to adequately filter input submitted through the car_name parameter in /admin/add_cars.php, and also fails to apply proper HTML entity encoding when displaying that data on the /admin/add_vehicles.php page. This allows an attacker to inject malicious JavaScript code into the database. When other users (especially administrators) view the vehicle list, this malicious script will execute in their browser, potentially leading to consequences such as session hijacking, data theft, or the execution of unauthorized actions. |
|---|
| 원천 | ⚠️ https://github.com/i-Corner/cve/issues/13 |
|---|
| 사용자 | iC0rner (UID 82839) |
|---|
| 제출 | 2025. 07. 28. PM 03:21 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 30. AM 10:24 (2 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 318287 [code-projects Simple Car Rental System 1.0 /admin/add_vehicles.php car_name 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|