Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/patrickdeanramos/cve-2024-41301-bookea-tu-mesa-is-vulnerable-to-stored-cross-site-scripting
Vulnerability AnalysisCode AnalysisWeb Application ExploitationWeb SecurityLearning & Education
GitHubpatrickdeanramos/cve-2024-41301-bookea-tu-mesa-is-vulnerable-to-stored-cross-site-scripting

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

Proof-of-concept for CVE-2024-41301 demonstrating stored cross-site scripting in Bookea-tu-Mesa. Includes vulnerable code analysis and remediation using htmlspecialchars.

View Repository
22 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-41301 - Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

Bookea-tu-Mesa is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers to inject malicious scripts that execute within the context of a user's session.

Steps to Reproduce:

  1. Go to http://localhost/Bookea-tu-Mesa/index.php
  2. Enter "" in the Full Name and submit. alt text
  3. The script executes, demonstrating the XSS vulnerability. alt text

Vulnerable Code: File: insert_reservation.php Line 11: $Fname = mysqli_real_escape_string($conex, $_POST['Fname']);

Suggested Fix: $Fname = htmlspecialchars(mysqli_real_escape_string($conex, $_POST['Fname']), ENT_QUOTES, 'UTF-8');

This would sanitize the HTML character.

Authors:
Patrick Dean Ramos
Nathu Nandwani
Junnair Manla
Kevin Rosales
Steve Nyan
Shanavas Shakeer
Lani Lambert

Download Tool