提交 #497356: codeprojects Wazifa v1.0 Cross Site Scripting信息

标题codeprojects Wazifa v1.0 Cross Site Scripting
描述There is an Cross Site Scripting vulnerability in Real Estate Property Management System in search_results.php .Control parameter: $lastname A malicious attacker can use this vulnerability to obtain administrator login credentials or phishing websites
来源⚠️ https://github.com/nanguawuming/CVE2/blob/main/cve2.pdf
用户
 eXVtaW5n (UID 81300)
提交2025-02-09 19時36分 (1 年前)
管理2025-02-10 20時07分 (1 day later)
状态已接受
VulDB条目295146 [code-projects Wazifa System 1.0 /search_resualts.php searchuser firstname/lastname 跨网站脚本]
积分18

Want to know what is going to be exploited?

We predict KEV entries!