| Название | www.sourcecodester.com Vehicle Management System 1.0 Cross-site Scripting (XSS) |
|---|
| Описание | The id parameter in the confirmbooking.php file of the Vehicle Management System is not strictly verified for user input, resulting in the input data can be combined with Sql statements, resulting in the user input information displayed on the page without filtering. As a result, Cross-site Scripting (XSS) exists. Attackers can exploit the vulnerability, threatening user security.
Source DownLoad:https://www.sourcecodester.com/php/14404/vehicle-management-system-phpmysql.html |
|---|
| Источник | ⚠️ https://github.com/Keyand/Multi-Restaurant-Table-Reservation-System-Search/blob/main/Vehicle%20Management%20System%20confirmbooking.php%20has%20Cross-site%20Scripting%20(XSS).pdf |
|---|
| Пользователь | kkey (UID 81096) |
|---|
| Представление | 07.03.2025 01:52 (2 лет назад) |
|---|
| Модерация | 16.03.2025 14:29 (10 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 299876 [SourceCodester Vehicle Management System 1.0 /confirmbooking.php id межсайтовый скриптинг] |
|---|
| Баллы | 20 |
|---|