| tiêu đề | code-projects Pharmacy Management System 1.0 Basic Cross Site Scripting |
|---|
| Mô tả | A **stored XSS vulnerability** has been identified in the **Pharmacy Management System** version 1.0, specifically in the **supplier management update functionality**. This vulnerability occurs because the input in the `address` parameter is not properly sanitized before being saved to the database. This flaw allows attackers to inject malicious JavaScript code that will persist in the system and execute whenever the affected supplier record is accessed. |
|---|
| Nguồn | ⚠️ https://gist.github.com/higordiego/bc051be4a8c6b6641578cad533742aab |
|---|
| Người dùng | c4ttr4ck (UID 75518) |
|---|
| Đệ trình | 19/10/2024 18:06 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 20/10/2024 20:49 (1 day later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 281022 [code-projects Pharmacy Management System 1.0 Manage Supplier Page /manage_supplier.php address Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|