| Title | MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 Reflected XSS |
|---|
| Description | The Online College Event Hall Reservation System is vulnerable to a Reflected Cross-Site Scripting (XSS) attack in home.php due to unsanitized URL parameters. This vulnerability allows attackers to inject malicious scripts through the id parameter, demonstrated by an alert box script, highlighting the importance of encoding and validating user inputs to mitigate XSS risks. |
|---|
| Source | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20home.php.md |
|---|
| User | nochizplz (UID 64302) |
|---|
| Submission | 03/06/2024 16:15 (2 years ago) |
|---|
| Moderation | 03/15/2024 17:29 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 256952 [MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 home.php ID cross site scripting] |
|---|
| Points | 18 |
|---|