Kashipara School Management System Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting (XSS) vulnerability has been identified in Kashipara School Management System version 1.0. The issue arises in the adminLogin.php file, where the formuser and formpassword parameters are susceptible to XSS attacks. This vulnerability allows attackers to inject malicious JavaScript code that could be executed in the context of the user's browser.
Impact
Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed immediately in the user's browser.
Reproduction
To reproduce this vulnerability, send a request to the adminLogin.php page with the formuser and formpassword parameters. Include JavaScript code in these parameters to demonstrate the cross-site scripting effect, such as an alert box or other JavaScript execution.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.