Code-Projects Online Shop Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Online Shop version 1.0. The issue resides in the file '/view.php', where user-supplied input in the '$name' and '$details' parameters is echoed without proper validation. This flaw allows remote attackers to inject malicious scripts, potentially leading to the theft of sensitive client information.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a request to '/view.php' with crafted '$name' and '$details' parameters that include JavaScript payloads. The injected scripts will be executed when the page is viewed.