Description
SourceCodester Road Accident Map Marker是SourceCodester开源的一个道路事故地图标记项目。 SourceCodester Road Accident Map Marker 1.0版本存在代码注入漏洞，该漏洞源于对参数 mark_name 的错误操作会导致跨站点脚本攻击。
SourceCodester Road Accident Map Marker 代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-13021
https://www.cve.org/CVERecord?id=CVE-2024-13021
https://vuldb.com/submit/469267
https://github.com/advisories/GHSA-pfp6-3p25-49rj
https://www.sourcecodester.com/php/17709/road-accident-map-marker-using-php-and-mysql-source-code.html
https://app.opencve.io/cve/?vendor=rems&product=