| 标题 | code-projects Online Shop IN PHP, CSS, JavaScript, AND MYSQL 1.0 Cross Site Scripting |
|---|
| 描述 | In the `/view.php` file, an unrestricted Cross-Site Scripting (XSS) vulnerability and injection attacks exist, specifically targeting the `$name` and `$details` paremeters. The function echo the user-supplied parameter without validation. Malicious attackers can leverage this vulnerability to access sensitive client information. |
|---|
| 来源 | ⚠️ https://gist.github.com/th4s1s/fc65dafa7237cc66a18ef6005075c31b |
|---|
| 用户 | lio346 (UID 79690) |
|---|
| 提交 | 2025-01-02 09時49分 (2 年前) |
|---|
| 管理 | 2025-01-02 19時05分 (9 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 290104 [code-projects Online Shop 1.0 /view.php name/details 跨网站脚本] |
|---|
| 积分 | 18 |
|---|