Skip to content

Possible XSS vulnerabilies #92

@enferas

Description

@enferas

Hello,

I would like to report for multiple XSS vulnerabilities.

For example,

In file Mini-Inventory-and-Sales-Management-System-master\application\views\email\memberupdate.php

<p>Hi <?=$this->input->post('title')." ".$this->input->post('firstName')?>,<br>
<td><?=$this->input->post('title') ? $this->input->post('title') : "---"?></td>
<?=$this->input->post('firstName')." ".$this->input->post('lastName')." ".$this->input->post('otherName')?>
<?=$this->input->post('mobile1') . ($this->input->post('mobile2') ? ", ".$this->input->post('mobile2') : "")?>
<td><?=$this->input->post('membershipId')?></td>
<td><?=$this->input->post('gender')?></td>
<td><?=$this->input->post('address')?></td>
<td><?=$this->input->post('city')?></td>
<td><?=$this->input->post('state')?></td>
<td><?=$this->input->post('country')?></td>

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions