EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Stored Cross Site Scripting

• Exploit Database
• 261 阅读

• 作者： Soushikta Chowdhury
  日期： 2020-12-02
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/49153/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14

  # Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting # Exploit Author: Soushikta Chowdhury # Vendor Homepage:http://egavilanmedia.com # Software Link:http://egavilanmedia.com/user-registration-and-login-system-with-admin-panel/ # Version: 1.0 # Tested on: Windows 10 # Contact: https://www.linkedin.com/in/soushikta-chowdhury/   Vulnerable Parameters: Full Name Steps for reproduce: 1. Go to registration page 2. fill in the details & put <script>alert("soushikta")</script> payload in Full name. 3. Now goto Admin Panel. After entering go to Manage Users and go to the last page to check the newly added user. We could see that our payload gets executed.