PHPGurukul Nipah Virus Testing Management System Search Report Page patient-search-report.php cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file patient-search-report.php of the component Search Report Page. The manipulation of the argument Search By Patient Name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246123.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Nipah virus Testing Management System 跨站脚本漏洞

Nipah virus Testing Management System是一个在线病毒诊断平台。 Nipah virus Testing Management System 1.0版本存在跨站脚本漏洞，该漏洞源于组件Search Report Page中的文件 Patient-search-report.php 存在未知部分， 通过参数 Search By Patient Name导致跨站脚本。

N/A

N/A