Cross-site Scripting (XSS) - Stored in projectsend/projectsend

💥 BUG CSRF bug to delete file 💥 SUMMURY during batch delete file there is no csrf token present 💥 STEP TO REPRODUCE 1. vulnerable url is http://localhost/projectsend2/manage-files.php?action=delete&batch=27&batch=31&page=1 .\ Here in this url change file-id to delete and open the url and see file...

Override Deletion Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts

Journalx 2.0 is a remote processing platform for journal manuscripts developed independently by Beijing Magtech. Journalx 2.0 is vulnerable to an override deletion vulnerability. An attacker can exploit the vulnerability to batch delete unfinished manuscripts in the author's background of the...