| Название | SOURCECODESTER house rental management system 1.0 Cross-Site Scripting |
|---|
| Описание | Stored Cross-Site Scripting (XSS) affecting house rental management system at "tenants" endpoint and leading to the theft of user sessions, an attacker could exploit vulnerabilities in the web application by injecting scripts that capture users' session tokens or credentials. This allows the attacker to hijack user sessions, gaining unauthorized access to sensitive information or performing actions on behalf of the compromised users. |
|---|
| Источник | ⚠️ https://drive.google.com/file/d/1z30nTAfoX58NqwIMXyHb3LB6Pv2bEm5v/view?usp=sharing |
|---|
| Пользователь | Strik3r (UID 61057) |
|---|
| Представление | 11.01.2024 14:32 (3 лет назад) |
|---|
| Модерация | 12.01.2024 13:49 (23 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 250608 [SourceCodester House Rental Management System 1.0 Manage Tenant Details Name межсайтовый скриптинг] |
|---|
| Баллы | 19 |
|---|