Medical Hub Directory Site 1.0 Cross Site Scripting

Medical Hub Directory Site version 1.0 suffers from a persistent cross site scripting vulnerability.

MD5 | 30ae958982e878b2d1b922be0770bff1

## Title: Medical Hub Directory Site 1.0 XSS Stored 
# Author: Hejap Zairy
# Date: 30.07.2022
# Vendor:
# Software:
# Reference:
# Tested on: Windows, MySQL, Apache

## Description:
Stored XSS, also known as persistent XSS, is the more damaging of the two. It occurs when a malicious script is injected directly into a vulnerable web application. Reflected XSS involves the reflecting of a malicious script off of a web application, onto a user's browser.

[+] Payloads:
> System Short Name
<img src=1 href=1 onerror="javascript:alert('HEJAP ZAIRY AL-SHARIF')"></img>

## Proof and Exploit:

Related Posts