| Título | FotosCMS2 cookie parameter in profile.php has an XSS vulnerability. |
|---|
| Descrição | On the profile.php page, line 20 will output, echo$_ SESSION ['username '].' - Профиль';， But$_ SESSION ['username '] is obtained through the if (isset ($-COOKIE ['username cookie')) {$_SESSION ['username ']=$-COOKIE ['username cookie'];} in the cfg. php file$_ COOKIE ['username cookie '] is something that users can manipulate and can cause XSS vulnerabilities.
|
|---|
| Fonte | ⚠️ https://github.com/AlexanderLivanov/FotosCMS2/issues/18 |
|---|
| Utilizador | zihe (UID 56943) |
|---|
| Submissão | 23/10/2023 08h14 (há 3 anos) |
|---|
| Moderação | 28/10/2023 08h46 (5 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 243802 [AlexanderLivanov FotosCMS2 até 2.4.3 Cookie profile.php username Script de Site Cruzado] |
|---|
| Pontos | 20 |
|---|