PHPGurukul Hospital Management System 1.0 - Cross-Site Scripting via First Name Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-7173. PoCs published by sharathc213.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2023-7173, a stored XSS vulnerability in the Hospital Management System 1.0. The PoC includes a Dockerized environment and step-by-step instructions to reproduce the vulnerability by injecting a malicious payload into the 'Fullname' parameter during user registration.
Description
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249357 was assigned to this vulnerability.
Exploits (1)
This repository contains a functional proof-of-concept for CVE-2023-7173, a stored XSS vulnerability in the Hospital Management System 1.0. The PoC includes a Dockerized environment and step-by-step instructions to reproduce the vulnerability by injecting a malicious payload into the 'Fullname' parameter during user registration.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N