osuAkatsuki / osuAkatsuki/admin-panel
XSS via unescaped $_GET["id"] in Print.php
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 1
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
$_GET["id"] is output into HTML attributes and onclick handlers without htmlspecialchars() in multiple places in Print.php. A crafted URL with a malicious id param runs JS in the admin's browser.
inc/Print.php, lines 730, 781, 2328, 2376
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open inc/Print.php at lines 730, 781, 2328, and 2376 and inspect how $_GET["id"] reaches HTML attributes and onclick handlers. Verify each output is safely escaped, then test a crafted URL with a malicious id parameter and confirm it no longer executes JavaScript in the admin browser.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 70/100