| tiêu đề | Online Eyewear Shop Website has XSS vulnerability |
|---|
| Mô tả | BUG_Author: Murasaki
URL：http://localhost/oews/admin/?page=orders/view_order&id=
Link:https://www.sourcecodester.com/php/16089/online-eyewear-shop-website-using-php-and-mysql-free-download.html
There is a stored XSS vulnerability in the order submission,attackers can use XSS injection to steal the identity authentication of administrative users, and perform some background operations as administrators to achieve CSRF attacks. Attackers can also hang horses on websites, so that visitors' browsers can be controlled by attackers.
|
|---|
| Nguồn | ⚠️ https://github.com/1MurasaKi/Eyewear_Shop_XSS/blob/main/README.md |
|---|
| Người dùng | Murasaki (UID 41555) |
|---|
| Đệ trình | 22/02/2023 08:04 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 22/02/2023 20:25 (12 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 221635 [SourceCodester Online Eyewear Shop 1.0 view_order id Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|