SQLI/stored XSS vulnerabilities
Brought to you by:
bluenotemkvi
Menu
▾
▴
#18 SQLI/stored XSS vulnerabilities
To the developers,
In the progress of our security research project, we found SQLI/stored XSS vulnerabilities in version 1.0.4 of the application. SQLI Related files: groupadmin.php, officeadmin.php. stored XSS related files: display.php, leftmain.php, timeedit.php
Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.
Thank you.
we further found request race vulnerabilities in version 1.0.4 of the application. Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.