| 标题 | Sourcecodester Warehouse Management System v1.0 Store XSS on supplier.php |
|---|
| 描述 | Warehouse Management System Store XSS on (supplier.php) .The potential risk of Cross-Site Scripting (XSS) arises because the values of the `$nama_supplier` and `$alamat_supplier` and`$notelp_supplier`variables are directly inserted into the `value` attribute of HTML input fields without undergoing HTML entity encoding. This means that if these variables contain malicious JavaScript code, this code will be executed by the browser when the page loads. |
|---|
| 来源 | ⚠️ https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS2.md |
|---|
| 用户 | LI YU (UID 67398) |
|---|
| 提交 | 2024-04-09 03時28分 (2 年前) |
|---|
| 管理 | 2024-04-10 19時53分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 260270 [SourceCodester Warehouse Management System 1.0 supplier.php nama_supplier/alamat_supplier/notelp_supplier 跨网站脚本] |
|---|
| 积分 | 20 |
|---|