Police Crime Record Management System 1.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)

• Exploit Database
• 40 阅读

• 作者： Ömer Hasan Durmuş
  日期： 2021-08-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/50195/

• # Exploit Title: Police Crime Record Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
  # Date: 12/08/2021
  # Exploit Author: Ömer Hasan Durmuş
  # Software Link: https://www.sourcecodester.com/php/14894/police-crime-record-management-system.html
  # Version: v1.0
  # Category: Webapps
  # Tested on: Linux/Windows
  
  Step 1 : Login to admin account in http://TARGET/ghpolice/login.php default credentials. (1111:admin123)
  Step 2 : Then click on the "Add Staff"
  Step 3 : Input "<img src=x onerror=alert(1)>" in the field "Firstname" or "Othernames"
  Step 4 : Click on "Save and Continue"
  Step 5 : Update page.