| Название | code-projects job-recruitment-in-php V1.0 Cross Site Scripting |
|---|
| Описание | In /_email.php, There is a cross-site scripting attack vulnerability in Job-recruitment system. The parameter that can be controlled is: $row["email"] . A malicious attacker can obtain sensitive information about administrators.
|
|---|
| Источник | ⚠️ https://github.com/su-co/cve/blob/main/xss-su-co.md |
|---|
| Пользователь | humiao (UID 79103) |
|---|
| Представление | 19.12.2024 10:38 (2 лет назад) |
|---|
| Модерация | 20.12.2024 23:33 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 289141 [code-projects Job Recruitment 1.0 /_email.php email межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|