Gửi #640411: Campcodes Hospital Management System Last updated at August 18, 2024 Cross Site Scriptingthông tin

tiêu đềCampcodes Hospital Management System Last updated at August 18, 2024 Cross Site Scripting
Mô tảThe application fails to properly validate and sanitize user-supplied input in the “Doctor Specialization” field. As a result, the injected payload is stored in the database and executes whenever the affected page is accessed. This confirms the presence of a Stored Cross-Site Scripting (XSS) vulnerability.
Nguồn⚠️ https://github.com/Yashh-G/zero-day-research/blob/main/HMS_Stored_Cross-site_Scripting.docx
Người dùng
 Yashh2 (UID 88530)
Đệ trình23/08/2025 09:06 (cách đây 10 các tháng)
Kiểm duyệt30/08/2025 18:56 (7 days later)
Trạng tháiđược chấp nhận
Mục VulDB322045 [Campcodes Hospital Management System 1.0 Edit Doctor Specialization Page edit-doctor-specialization.php Tập lệnh chéo trang]
điểm17

Interested in the pricing of exploits?

See the underground prices here!