| 제목 | PHPGurukul Hospital Management System 4.0 Cross Site Scripting |
|---|
| 설명 | Software link: https://phpgurukul.com/hospital-management-system-in-php/
Steps to reproduce:
1. Go to the website and login to as a admin (http://localhost/Hospital-Management-System-PHP/hospital/index.php#)
2. Navigate to search box section on the website
3. Fill up the search box with required HTML/attribute-based XSS payload
4. Payload: <img src=x onerror=alert('XSS');>
5. Hit search button and inject the XSS payload
6. Observed that the injected XSS payload reflected on the website. Which confirms that the website is vulnerable to HTML/attribute based XSS.
PoC video link: https://drive.google.com/file/d/13ktF2bgdu7oHi1cuSuNHFuv9e2tbIjV3/view?usp=sharing
Impact:
1. Arbitrary JavaScript execution
2. Session theft account takeover
3. Data exfiltration
4. Malware delivery / persistence
Mitigation:
1. Stop inserting untrusted input as HTML
2. Sanitize when HTML is required
3. Context-aware encoding
4. Enforce a strong Content-Security-Policy (CSP)
Researcher:
Minhajul Taivin (Offensive Security Researcher @ Red Team Bangladesh)
https://www.linkedin.com/in/minhajultaivin/ |
|---|
| 원천 | ⚠️ https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-9753.md |
|---|
| 사용자 | taivack (UID 92759) |
|---|
| 제출 | 2025. 11. 18. PM 06:23 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 05. PM 06:02 (17 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 322054 [Campcodes Online Hospital Management System 1.0 Patient Search patient-search.php Search by Name Mobile No 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|