| 标题 | code-projects Pharmacy Management System 1.0 Code Injection |
|---|
| 描述 | An HTML Reflect vulnerability has been identified in the Pharmacy Management System version 1.0, specifically during the customer information update process. The issue arises due to the lack of proper sanitization on the address parameter. Malicious input provided through this parameter is reflected directly in the HTML response, enabling attackers to inject HTML or JavaScript content into the page.
Although the severity of this vulnerability is categorized as low, it can still be exploited for phishing attacks, content spoofing, or user interface manipulation. This could lead to misleading information being presented to users, causing reputational damage or enabling social engineering attacks. Immediate action is recommended to mitigate the risk, even though it does not pose a critical security threat. |
|---|
| 来源 | ⚠️ https://gist.github.com/higordiego/e5b7cd1e1c29eb53dc6685c0ceb51470 |
|---|
| 用户 | c4ttr4ck (UID 75518) |
|---|
| 提交 | 2024-10-19 19時26分 (2 年前) |
|---|
| 管理 | 2024-10-20 20時49分 (1 day later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 281023 [code-projects Pharmacy Management System 1.0 Manage Customer Page /manage_customer.php suppliers_name/address 跨网站脚本] |
|---|
| 积分 | 0 |
|---|