[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities

Author
​Ragha Deepthi
Risk
[
Security Risk High
]
0day-ID
0day-ID-22605
Category
web applications
Date add
08-09-2014
Platform
php
​# Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities
in PHP Stock Management System 1.02
# Date: 25 Aug 2014
# Exploit Author: ​Ragha Deepthi K R
# Vendor Homepage: ​http://www.posnic.com/​
# Software Link:​ http://sourceforge.net/projects/stockmanagement/
# Version: ​1.02
# Tested on: Windows 7
 
#################################################
​PHP Stock Management System 1.02​ is vulnerable for ​multiple Persistent
Cross Site Scripting Vulnerabilit​ies.
The vulnerability affects 'sname'(Store Name Field), 'address'(Address
Field), 'place'(Place Field), 'city'(City Field), pin(Pin Field),
website(Website Field), email(Email Field) parameter​s​ while updating the
​store details in 'update_details.php' and when seen in 'view_report.php'
 
#################################################
Greetz :​ Syam !​

#  0day.today [2024-11-15]  #