Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Persistent cross-site scripting (XSS) targeted towards web admin through /admin-panel1.php at via the parameter demail. #20

Open
fuzzyap1 opened this issue Feb 13, 2022 · 0 comments
Open

Persistent cross-site scripting (XSS) targeted towards web admin through /admin-panel1.php at via the parameter demail. #20

fuzzyap1 opened this issue Feb 13, 2022 · 0 comments

Comments

@fuzzyap1
Copy link

Persistent cross-site scripting (XSS) in Hospital Management System v4.0 targeted towards web admin through /admin-panel1.php at via the parameter demail.

Add Doctor info payload to Doctor Name of Add Doctor page to target /admin-panel1.php ,then use burpsuite get requests datas,change the 'demail' parameter to xss payload: <sCrIpT>alert(5555)</ScRiPt>
mail-xss

xss-2

Proof of concept (Poc)

<sCrIpT>alert(5555)</ScRiPt>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@fuzzyap1