漏洞标题
Campcodes Coffee Shop POS System Users.php 跨站脚本
漏洞描述信息
营代码咖啡店POS系统Users.php跨站脚本
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
Campcodes Coffee Shop POS System Users.php cross site scripting
漏洞描述信息
A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226981 was assigned to this vulnerability.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
漏洞类别
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞标题
Campcodes Coffee Shop POS System 跨站脚本漏洞
漏洞描述信息
Campcodes Coffee Shop POS System是Campcodes公司的一个咖啡店 POS 系统。 Campcodes Coffee Shop POS System 1.0版本存在跨站脚本漏洞,该漏洞源于在文件Users.php的参数firstname中存在跨站脚本(XSS)漏洞。
CVSS信息
N/A
漏洞类别
跨站脚本