| 제목 | SourceCodester Resort Reservation System 1 Cross Site Scripting |
|---|
| 설명 | A stored cross-site scripting (XSS) vulnerability exists in the Reservation Management module of the SourceCodester Resort Reservation System (PHP + SQLite). The application fails to properly sanitize and encode user-supplied input in reservation fields such as Fullname and Remarks. Malicious JavaScript injected into these fields is stored in the database and executed when rendered in administrative pages, potentially leading to session hijacking and privilege escalation. |
|---|
| 원천 | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312 |
|---|
| 사용자 | rvpipalwa (UID 93501) |
|---|
| 제출 | 2026. 02. 28. AM 11:14 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 03. 08. PM 06:43 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 349785 [SourceCodester Resort Reservation System 1.0 Reservation Management ?page=manage_reservation 아이디 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|