Submeter #588828: PHPGurukul Hospital-Management-System 4.0 Cross Site Scriptinginformação

TítuloPHPGurukul Hospital-Management-System 4.0 Cross Site Scripting
DescriçãoA critical Stored Cross-Site Scripting (XSS) vulnerability was discovered in the edit-patient.php file of PHPGurukul's Hospital Management System (v4.0). Attackers can inject malicious JavaScript via the patname field (POST parameter), which gets persistently stored in the database and executed whenever the profile page is viewed.
Fonte⚠️ https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-Stored-XSS/blob/main/stored-xss-exploit.md
Utilizador
 Subhash Paudel (UID 66830)
Submissão02/06/2025 16h49 (há 1 Ano)
Moderação03/06/2025 22h51 (1 day later)
EstadoAceite
Entrada VulDB311046 [PHPGurukul Hospital Management System 4.0 POST Parameter edit-patient.php?editid=2 patname Script de Site Cruzado]
Pontos18

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!