| Título | code-projects job-recruitment-in-php V1.0 Cross Site Scripting |
|---|
| Descrição | In /_email.php, There is a cross-site scripting attack vulnerability in Job-recruitment system. The parameter that can be controlled is: $row["email"] . A malicious attacker can obtain sensitive information about administrators.
|
|---|
| Fonte | ⚠️ https://github.com/su-co/cve/blob/main/xss-su-co.md |
|---|
| Utilizador | humiao (UID 79103) |
|---|
| Submissão | 19/12/2024 10h38 (há 2 anos) |
|---|
| Moderação | 20/12/2024 23h33 (2 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 289141 [code-projects Job Recruitment 1.0 /_email.php email Script de Site Cruzado] |
|---|
| Pontos | 17 |
|---|