| Título | code-projects Pharmacy Management System 1.0 Code Injection |
|---|
| Descrição | An HTML Reflect vulnerability has been identified in the Pharmacy Management System version 1.0, specifically during the customer information update process. The issue arises due to the lack of proper sanitization on the address parameter. Malicious input provided through this parameter is reflected directly in the HTML response, enabling attackers to inject HTML or JavaScript content into the page.
Although the severity of this vulnerability is categorized as low, it can still be exploited for phishing attacks, content spoofing, or user interface manipulation. This could lead to misleading information being presented to users, causing reputational damage or enabling social engineering attacks. Immediate action is recommended to mitigate the risk, even though it does not pose a critical security threat. |
|---|
| Fonte | ⚠️ https://gist.github.com/higordiego/e5b7cd1e1c29eb53dc6685c0ceb51470 |
|---|
| Utilizador | c4ttr4ck (UID 75518) |
|---|
| Submissão | 19/10/2024 19h26 (há 2 anos) |
|---|
| Moderação | 20/10/2024 20h49 (1 day later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 281023 [code-projects Pharmacy Management System 1.0 Manage Customer Page /manage_customer.php suppliers_name/address Script de Site Cruzado] |
|---|
| Pontos | 0 |
|---|