| 标题 | SOURCECODESTER house rental management system 1.0 Cross-Site Scripting |
|---|
| 描述 | Reflected Cross-Site Scripting (XSS) affecting house rental management system at the "?page" parameter and leading to the theft of user sessions, an attacker could exploit vulnerabilities in the web application by injecting scripts that capture users' session tokens or credentials. This allows the attacker to hijack user sessions, gaining unauthorized access to sensitive information or performing actions on behalf of the compromised users. |
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1DTGd_IWdS_tMOQN0Pt1-MeZ4Yv3tXiRt/view?usp=sharing |
|---|
| 用户 | Strik3r (UID 61057) |
|---|
| 提交 | 2024-01-11 14時31分 (3 年前) |
|---|
| 管理 | 2024-01-12 13時48分 (23 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 250607 [SourceCodester House Rental Management System 1.0 index.php page 跨网站脚本] |
|---|
| 积分 | 20 |
|---|