| 标题 | XSS injection vulnerability exists in txtvaccinationID parameter of design-and-implementation-covid-19-directory-vacination |
|---|
| 描述 | XSS injection vulnerability exists in txtvaccinationID parameter of verification.php file of design-and-implementation-covid-19-directory-vacination.
With XSS, cybercriminals can turn trusted websites into malicious ones, thus causing inordinate harm and damage not only to the victims but also to the reputation of the trusted website's owner.
Payload:
txtvaccinationID = "<><ScRiPt>alert(9407)</ScRiPt> |
|---|
| 来源 | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(1).pdf |
|---|
| 用户 | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| 提交 | 2023-03-11 15時52分 (4 年前) |
|---|
| 管理 | 2023-03-11 18時40分 (3 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 222852 [SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php 跨网站脚本] |
|---|
| 积分 | 20 |
|---|