BugBountyHunter

Hi There

I found a reflected XSS on doctors.php.

The parameter doctor is missing sensitization

Payload

';alert(1)//

Steps To Reproduce

Go to:

• https://firstbloodhackers.com/doctors.php?doctor=';alert(1)//

Impact

• Perform any action within the application that the user can perform.
• View any information that the user is able to view.
• Modify any information that the user is able to modify.
• Initiate interactions with other application users, including malicious attacks, that will appear to originate from the initial victim user..
• Steal user's cookie.

Remediation

• encode special characters like ' " < >

Supporting Material/References:

• https://www.owasp.org/index.php/Top_10_2013-A3-Cross-Site_Scripting_(XSS)