| 标题 | XSS injection vulnerability exists in txtphone parameter of design-and-implementation-covid-19-directory-vacination |
|---|
| 描述 | XSS injection vulnerability exists in txtphone parameter of register.php file of design-and-implementation-covid-19-directory-vacination
With XSS, cybercriminals can turn trusted websites into malicious ones, thus causing inordinate harm and damage not only to the victims but also to the reputation of the trusted website's owner.
Payload:
txtphone=%27%22%28%29%26%25%3Czzz%3E%3CScRiPt+%3Ealert%28%27phone%27%29%3C%2FScRiPt%3E |
|---|
| 来源 | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(5).pdf |
|---|
| 用户 | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| 提交 | 2023-03-11 15時55分 (4 年前) |
|---|
| 管理 | 2023-03-11 18時41分 (3 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 222853 [SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php 跨网站脚本] |
|---|
| 积分 | 0 |
|---|