| Название | SourceCodester Service Provider Management System using PHP and MySQL 1.0 Cross Site Scripting |
|---|
| Описание | The vulnerability resides in the file system_info/index.php. Input from users in the System Name and System Short Name fields is not properly sanitized, allowing for Cross-Site Scripting (XSS) attacks to be executed. |
|---|
| Источник | ⚠️ https://docs.google.com/document/d/1upC4101Ob9UW7fGC_valsEa45Q5xuBgcKZhs1Q-WoBM/edit?usp=sharing |
|---|
| Пользователь | R0ck3t (UID 70759) |
|---|
| Представление | 22.06.2024 07:55 (2 лет назад) |
|---|
| Модерация | 22.06.2024 17:41 (10 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 269479 [SourceCodester Service Provider Management System 1.0 System Info Page system_info/index.php System Name/System Short Name межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|