Sistem Manajemen Akta Kelahiran Online 1.0 Cross Site Scripting

  • Whatsapp
OX App Suite 7.10.5 Cross Site Scripting
OX App Suite Cross Site Scripting

News.nextcloud.asia

Sistem Manajemen Akta Kelahiran Online versi 1.0 mengalami kerentanan skrip lintas situs yang persisten.

SHA-256 | 7e9852e1ba3b10ed9809857eace8d6e330d1f9d7306d8b2d80c0851d85229f86

# Exploit Title: Online Birth Certificate Management System - Stored Cross-Site Scripting (XSS)
# Google Dork: N/A
# Date: 2022-9-27
# Exploit Author: yousef alraddadi - https://twitter.com/y0usef_11
# Vendor Homepage: https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/OBCMS.zip
# Tested on: windows 11 - XAMPP
# CVE : N/A
# Version: 1.0

Vulnerability Details
======================

Steps :

1) Log in to the application after register new user

Username: test
Password: 12345

2) Navigate to Birth Reg Form and Click on Add Details.

3) add full name payload => <script>alert(document.cookie);</script>

4) and all field enter payload only Contact Number enter number

Pos terkait

Tinggalkan Balasan

Alamat email Anda tidak akan dipublikasikan. Ruas yang wajib ditandai *