| tiêu đề | GitHub MateisHomePage-Website 1.0 Cross Site Scripting |
|---|
| Mô tả | VULNERABILITY DESCRIPTION:
A Cross-Site Scripting (XSS) vulnerability was discovered in the Robo Cafe Restaurant Management System (robo-cafe-rms) version 1.0. The application fails to properly sanitize or neutralize user-supplied input before rendering it back onto the webpage. An attacker can exploit this weakness by injecting a malicious script into the vulnerable input fields (Name, Address, and City) located within the update-account.php script. This allows the execution of arbitrary JavaScript code in the context of an unsuspecting user's browser session whenever they view the affected account profile page.
PROOF OF CONCEPT (PoC) / REPRODUCTION STEPS:
1. Visit https://mateishome.page hosted in the GitHub Repository (https://github.com/coolbeans1212/MateisHomePage-Website)
2. In the 'users.php' page there is a parameter named search which is vulnerable to XSS
3. Then add this payload in the search parameter search="><script>alert(document.cookie)</script>
|
|---|
| Nguồn | ⚠️ https://github.com/coolbeans1212/MateisHomePage-Website |
|---|
| Người dùng | dexter-morgan (UID 100687) |
|---|
| Đệ trình | 20/08/2026 14:05 (cách đây 1 tháng) |
|---|
| Kiểm duyệt | 28/09/2026 22:44 (1 month later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 411182 [coolbeans1212 MateisHomePage-Website đến ea2a4226deeca27ab1fb9df0552ec76444547811 users.php Tìm kiếm Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|