19 lines
No EOL
885 B
Text
19 lines
No EOL
885 B
Text
# Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities
|
||
in PHP Stock Management System 1.02
|
||
# Date: 25 Aug 2014
|
||
# Exploit Author: Ragha Deepthi K R
|
||
# Vendor Homepage: http://www.posnic.com/
|
||
# Software Link: http://sourceforge.net/projects/stockmanagement/
|
||
# Version: 1.02
|
||
# Tested on: Windows 7
|
||
|
||
#################################################
|
||
PHP Stock Management System 1.02 is vulnerable for multiple Persistent
|
||
Cross Site Scripting Vulnerabilities.
|
||
The vulnerability affects 'sname'(Store Name Field), 'address'(Address
|
||
Field), 'place'(Place Field), 'city'(City Field), pin(Pin Field),
|
||
website(Website Field), email(Email Field) parameters while updating the
|
||
store details in 'update_details.php' and when seen in 'view_report.php'
|
||
|
||
#################################################
|
||
Greetz : Syam ! |