| 标题 | SourceCodester Simple Traffic Offense System using PHP with Source Code 1.0 Missing Authorization |
|---|
| 描述 | The application exposes a settings update endpoint, save-settings.php, that does not enforce server-side authentication or authorization. An attacker can send a crafted request directly to this endpoint, modify site configuration values such as site_name and site_desc, and persist malicious script payloads in the application's settings.
Those values are later rendered into HTML without proper output encoding in pages such as login.php and sidebar.php, resulting in stored XSS.
This issue combines two security failures:
unauthenticated modification of critical site settings
improper output encoding leading to persistent cross-site scripting
The backend endpoint save-settings.php accepts settings changes without verifying that the caller is authenticated and authorized to change application-wide configuration.
In addition, the application renders settings values such as site_name and site_desc directly into HTML in login.php and sidebar.php without proper encoding or sanitization. As a result, attacker-controlled content persists in the database and executes in the browser when the affected pages are loaded. |
|---|
| 来源 | ⚠️ https://github.com/tan1540684326-QAQ/cve/issues/3 |
|---|
| 用户 | LiuHeQi (UID 99807) |
|---|
| 提交 | 2026-07-27 10時29分 (1 月前) |
|---|
| 管理 | 2026-09-06 17時55分 (1 month later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 399456 [SourceCodester Simple Traffic Offense System 1.0 Settings Update Endpoint save-settings.php site_name/site_desc 跨网站脚本] |
|---|
| 积分 | 20 |
|---|