| 제목 | PHPGurukul Directory Management System V2.0 cros |
|---|
| 설명 | During the security assessment of the "Directory Management System", I identified a critical Cross Site Scripting (XSS) vulnerability in the "/admin/add-directory.php" file. This vulnerability stems from the insufficient sanitization of user input provided through the "fullname" parameter. Due to this weakness, attackers can inject malicious JavaScript code that is subsequently executed in the context of other users’ browsers. Exploiting this flaw could lead to session hijacking, unauthorized operations, and leakage of sensitive information. Immediate remediation measures are necessary to protect user data, prevent privilege escalation, and maintain the integrity of the system. |
|---|
| 원천 | ⚠️ https://github.com/xiguala123/myCVE/issues/10 |
|---|
| 사용자 | xiguala123 (UID 84472) |
|---|
| 제출 | 2025. 08. 19. AM 03:45 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 08. 29. AM 09:05 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 321864 [PHPGurukul Directory Management System 2.0 /admin/add-directory.php fullname 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|