| 제목 | SourceCodester Drug Recommendation System Using Machine Learning, PHP, and MySQL Database 1.0 Cross Site Scripting |
|---|
| 설명 | A stored cross-site scripting (XSS) vulnerability exists in the /drug_recommender/profile functionality via the full name parameter. User-controlled input is stored without proper sanitization or output encoding and is later rendered on /drug_recommender/index.php, causing injected JavaScript to execute in the browser context of users viewing the dashboard. This persistent XSS may allow unauthorized client-side actions and access to information available to the victim's browser session.
CVSS v3.1: 6.1 (Medium) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Researchers Information
Researcher 1
Name: Karan Parelkar
Role: Independent Security Researcher
Email: [email protected]
GitHub: https://github.com/KaranParelkar
LinkedIn: https://www.linkedin.com/in/karan-parelkar-6a370125b/
Researcher 2
Name: Anubhav Verma
Role: Independent Security Researcher
Email: [email protected]
GitHub: https://github.com/anubhavv106
LinkedIn: https://www.linkedin.com/in/anubhav-verma-7123a1232/
Researcher 3
Name: Parth Desai
Role: Independent Security Researcher
Email: [email protected]
GitHub: https://github.com/ParthD31
LinkedIn: https://www.linkedin.com/in/parth-desai-801951224/ |
|---|
| 원천 | ⚠️ https://github.com/KaranParelkar/Drug_recommendation_system/blob/main/xss/profile/Readme.md |
|---|
| 사용자 | anubhav106 (UID 98769) |
|---|
| 제출 | 2026. 08. 25. PM 03:02 (26 날 ago) |
|---|
| 모더레이션 | 2026. 09. 19. PM 07:48 (25 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 407963 [SourceCodester Drug Recommendation System 1.0 index.php full name 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|