Online Cake Ordering System XSS via useruid Parameter

Executive Summary

This is a reflected Cross-Site Scripting (XSS) vulnerability in the Online Cake Ordering System 1.0. The issue occurs in the /404.php file where the useruid argument is reflected without proper sanitization. Attackers can inject malicious JavaScript code via a crafted URL, which executes in the victim's browser.

Useful 0 Not Useful 0

Detection Guidance

To detect this XSS vulnerability, check if the /404.php file reflects the useruid parameter without sanitization. Test by accessing URLs like http://[target]/404.php?useruid=<script>alert(1)</script>. If the script executes, the vulnerability exists.

Useful 0 Not Useful 0

Impact Analysis

An attacker could steal session cookies, perform unauthorized actions on behalf of the user, redirect users to malicious sites, or deliver malware. The attack requires tricking a user into clicking a malicious link but can be executed remotely without authentication.

Useful 0 Not Useful 0

Compliance Impact

This XSS vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles. For HIPAA, it may expose protected health information if user sessions are hijacked. Both standards require protecting against such attacks to maintain compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately sanitize user input by validating and encoding it using functions like htmlspecialchars() or htmlentities(). Implement security headers such as Content-Security-Policy and X-XSS-Protection. Regularly test for vulnerabilities.

Useful 0 Not Useful 0