CVE

FastAdmin Reflected XSS Vulnerability (url Parameter) Bug Author: lhzzz08 Affected Version: FastAdmin ≤ v1.2.0.20210401_beta (fixed in v1.2.1.20210731_beta) Vendor: FastAdminNet Software: FastAdmin on GitHub/Gitee Vulnerability Files: application/index/controller/User.php (lines 68, 146) application/index/view/user/login.html (line 7) application/index/view/user/register.html (line 8) Description Reflected XSS Vulnerability in FastAdmin index/user Login and Register Pages via url Parameter 1. Reflected XSS via url Parameter FastAdmin’s front-end user module (app\index\controller\User) accepts a url GET parameter in both the login and register endpoints. This parameter is intended to redirect users after successful authentication. In the vulnerable version, the parameter is retrieved with only a trim filter (no HTML sanitization) and assigned to the template: ...

SQL Injection Vulnerability in itsourcecode Courier Management System V1.0 BUG_Author: liuhanzhi Affected Version: V1.0 Vendor: itsourcecode Software: Courier Management System Vulnerability File: /manage_user.php Description 1. SQL Injection via id Parameter In the file /manage_user.php, the application directly concatenates the user-supplied id parameter into an SQL query without any sanitization or validation. Vulnerable code (line 5): $user = $conn->query("SELECT * FROM users where id =".$_GET['id']); 2. Exploiting the SQL Injection By injecting malicious SQL commands into the id parameter via a GET request, an attacker can manipulate the underlying SQL query to perform unauthorized database operations including data extraction, modification, and enumeration. ...