Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-51032 — A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. | Kitploit
Tools/GitHubGitHub/shree-chandragiri/cve-2024-51032
Vulnerability AnalysisWeb Application ExploitationWeb SecurityPenetration TestingLearning & Education
GitHubshree-chandragiri/cve-2024-51032

CVE-2024-51032

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field.

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-51032

Description

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field.

Vulnerability Type

Cross Site Scripting (XSS)

Vendor of Product

Sourcecodester

Affected Product Code Base:

https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html - 1.0

Affected Component:

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the owner input field on the manage_recipient page

Attack Vectors:

  1. Setup the application locally and login using the default admin credentials.
  2. Then go to "user list" option and you will see a normal user named cblake. Click on the action tab and click on edit and generate a password for the cblake user so you can login as cblake.
  • Then logout and then log back in as user cblake with the required credentials.
  • Now go to "recipients" field and click on create new button.
  • Now inject the paylaod "<svg onload=alert&#0000000040document.cookie)>" in the owner input field and complete the remaining form details and click the "save" button.
  • Now log back in as admin and go to recipients tab, you can see the entry which cblake did and we can also see an alert popping up which prints the session cookie of "admin" user.

    • Reference:

    https://www.sourcecodester.com/ https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html https://owasp.org/www-community/attacks/xss/

    Download Tool