| 标题 | SOURCECODESTER SIMPLE FOOD ORDERING SYSTEM 1.0 / process_order.php order Cross Site Scripting |
|---|
| 描述 | The Reflected Cross Site Scripting vulnerability is found on "SIMPLE FOOD ORDERING SYSTEM v1.0" process_order.php file, where the order parameter is not sanitizing the user input and executing the malicious code. This vulnerability is executed after login, Therefore, any malicious user can take advantage of this vulnerability and hijack the victim's cookie to take over his account by sending the malicious crafting URL.
Proof of Concept:
I verified the XSS attack with this payload: "process_order.php?order=<script>alert(1)<%2fscript>mjii5" to execute the attack.
Vendor Homepage:
https://www.sourcecodester.com
Software Link:
https://www.sourcecodester.com/php/15418/simple-food-ordering-system-client-side-phpmysqli-free-source-code.html
Google Dork: "inurl:sfos/process_order.php"
Recommendation:
Whoever uses this CMS, should update line no 41 of process_order.php with the following code to avoid cross-site scripting attack:
Old Code: <?php echo $_GET['order']; ?>
New Code: <?php echo htmlspecialchars(strip_tags($_GET['order'])); ?> |
|---|
| 来源 | ⚠️ https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md |
|---|
| 用户 | navaidansari (UID 41266) |
|---|
| 提交 | 2023-02-17 18時45分 (4 年前) |
|---|
| 管理 | 2023-02-18 08時31分 (14 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 221451 [SourceCodester Simple Food Ordering System 1.0 process_order.php order 跨网站脚本] |
|---|
| 积分 | 20 |
|---|