| Title | Alphaware E-Commerce System has XSS vulnerability |
|---|
| Description | Enter the administrator background page
http://127.0.0.1/cve/admin/stockin.php?id=3
There is an xss vulnerability in the stockin.php file
Enter XSS payload
'"><script>alert(/xss/)</script>
The page successfully pops up XSS, the vulnerability exists
Please see github for details
https://github.com/895515845/Alphaware-E-Commerce-System/blob/main/Alphaware_xss.md
The system download link
https://www.sourcecodester.com/php/11676/alphaware-simple-e-commerce-system.html |
|---|
| User | Anonymous User |
|---|
| Submission | 08/05/2022 18:21 (4 years ago) |
|---|
| Moderation | 08/05/2022 20:57 (3 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 205670 [SourceCodester Alphaware Simple E-Commerce System stockin.php ID cross site scripting] |
|---|
| Points | 17 |
|---|