| 标题 | GitHub Library Management System 1.0 Cross Site Scripting |
|---|
| 描述 | The application does not properly sanitize user input in the msg parameter of index.php, which allows an attacker to inject arbitrary JavaScript. This can result in Cross-Site Scripting (XSS), enabling actions such as session hijacking, credential theft, or redirection to malicious sites. |
|---|
| 来源 | ⚠️ https://gist.github.com/0xSebin/147e7f57daf7f270d957927892b0a51d |
|---|
| 用户 | 0xSebin (UID 35195) |
|---|
| 提交 | 2025-08-23 17時03分 (1 年前) |
|---|
| 管理 | 2025-08-31 10時24分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 322056 [Khanakag-17 Library Management System 直到 60ed174506094dcd166e34904a54288e5d10ff24 /index.php msg 跨网站脚本] |
|---|
| 积分 | 18 |
|---|