| 标题 | gedelumbung HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8 Cross Site Scripting |
|---|
| 描述 | The affected components are `application/modules/web/controllers/contact.php::kirim()` (unauthenticated entry), `application/modules/admin/views/contact/bg_home.php` / `bg_input.php`, and `application/models/app_global_admin_model.php::generate_index_contact()`. The `kirim()` action persists `$_POST['nama']`, `$_POST['email']`, `$_POST['alamat']`, `$_POST['telepon']`, and `$_POST['pesan']` directly into `dlmbg_contact` without sanitization:
```php
// application/modules/web/controllers/contact.php
function kirim()
{
$in['nama'] = $_POST['nama'];
$in['email'] = $_POST['email'];
$in['alamat'] = $_POST['alamat'];
$in['telepon'] = $_POST['telepon'];
$in['pesan'] = $_POST['pesan'];
$this->db->insert("dlmbg_contact",$in);
...
}
```
The admin list view (`generate_index_contact`) and the edit form (`bg_input.php`) echo `$h->nama`, `$h->email`, `$h->telepon`, `$h->alamat`, and `$h->pesan` unescaped. The `pesan` and `alamat` fields are loaded inside `<textarea class="ckeditor">` blocks, so the stored HTML/JS survives CKEditor round-trips and fires whenever an admin opens or saves the entry.
|
|---|
| 来源 | ⚠️ https://github.com/gedelumbung/HospitalManagement/issues/14 |
|---|
| 用户 | lixiang (UID 101908) |
|---|
| 提交 | 2026-10-09 13時53分 (14 日前) |
|---|
| 管理 | 2026-10-22 21時33分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 425387 [gedelumbung HospitalManagement 直到 c2d45543789a3887067d3915f69d44cfc2cf76a8 Contact Form contact.php kirim nama/email/alamat/telepon/pesan 跨网站脚本] |
|---|
| 积分 | 20 |
|---|