| 标题 | https://code-projects.org/ https://code-projects.org/pharmacy-management-system-in-php-with-source-code/ 1.0 Stored XSS |
|---|
| 描述 | To exploit stored XSS vulnerability, attackers inject script into the user input fields.For example, submitting the payload <script>alert(1)</script> in the user input field (updateprofile) and saving the data.
Application does not properly sanitize or validate the input, this script executed in the user’s browser, leading to an XSS attack. |
|---|
| 用户 | vulrep (UID 71951) |
|---|
| 提交 | 2024-08-27 17時41分 (2 年前) |
|---|
| 管理 | 2024-08-31 07時35分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 276261 [code-projects Pharmacy Management System 1.0 Update My Profile Page index.php?id=userProfileEdit fname/lname/email 跨网站脚本] |
|---|
| 积分 | 16 |
|---|