| Title | Gaatitrack Gaatitrack courier management system 10/27 Cross site Scripting |
|---|
| Description | The system has a reflective XSS vulnerability ('Cross site Scripting') [CWE-79], which allows attackers to obtain administrator cookies and other information by inserting malicious JavaScript statements, allowing attackers to fake administrator login through cookies. |
|---|
| Source | ⚠️ https://github.com/Glunko/gaatitrack-courier-management-system_vulnerability/blob/main/Cross_site_Scripting.md |
|---|
| User | G1un (UID 59945) |
|---|
| Submission | 12/14/2023 10:48 (3 years ago) |
|---|
| Moderation | 12/16/2023 20:32 (2 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 240886 [SourceCodester Best Courier Management System 1.0 manage_parcel_status.php ID cross site scripting] |
|---|
| Points | 0 |
|---|