| 제목 | https://code-projects.org/e-commerce-website-in-php-with-source- E-COMMERCE WEBSITE V1.0 Stored/Persistent XSS |
|---|
| 설명 | During the security assessment of "E-COMMERCE WEBSITE", I detected a critical stored cross-site scripting vulnerability in the "/Electricks-shop/pages/supplier_add.php" file. This vulnerability occurs due to inadequate input sanitization for user-controllable data that is stored and later displayed without proper output encoding. Attackers can inject malicious scripts that remain on the server and execute automatically when legitimate users browse the affected pages. This can result in unauthorized actions being performed on behalf of authenticated users, theft of sensitive information, and complete compromise of user sessions. Immediate remediation is required to prevent widespread impact. |
|---|
| 원천 | ⚠️ https://figshare.com/s/b35b6f6f6a10d8fdc131?file=58703836 |
|---|
| 사용자 | YYJ_0815 (UID 91605) |
|---|
| 제출 | 2025. 10. 14. AM 03:51 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 10. 27. PM 01:38 (13 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 330120 [code-projects E-Commerce Website 1.0 /pages/supplier_add.php supp_name/supp_address 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|