| Título | XSS injection vulnerability exists in txtphone parameter of design-and-implementation-covid-19-directory-vacination |
|---|
| Descrição | XSS injection vulnerability exists in txtphone parameter of register.php file of design-and-implementation-covid-19-directory-vacination
With XSS, cybercriminals can turn trusted websites into malicious ones, thus causing inordinate harm and damage not only to the victims but also to the reputation of the trusted website's owner.
Payload:
txtphone=%27%22%28%29%26%25%3Czzz%3E%3CScRiPt+%3Ealert%28%27phone%27%29%3C%2FScRiPt%3E |
|---|
| Fonte | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(5).pdf |
|---|
| Utilizador | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| Submissão | 11/03/2023 15h55 (há 3 anos) |
|---|
| Moderação | 11/03/2023 18h41 (3 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 222853 [SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php Script de Site Cruzado] |
|---|
| Pontos | 0 |
|---|