Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-30003: Online Market Place Site in PHP/OOP Free Source Code

Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the ‘Product Title’ and ‘Short Description’ fields.

CVE
#sql#xss#web#google#apache#java#php

Submitted by oretnom23 on Tuesday, April 12, 2022 - 17:21.

****Introduction****

This simple project is an Online Market Place Site in PHP. This is a web-based application project developed in PHP and MySQL Database. This project is an online platform that allows sellers to publish their selling items. This simple site was inspired by the Facebook Market Place feature where sellers can even sell used items. The application has a pleasant user interface using the Bootstrap v5 Framework and Material Kit Template. It also consists of user-friendly features and functionalities.

****About the Online Market Place Site in PHP****

I developed this project using the following:

  • XAMPP v3.3.0
  • PHP
  • MySQL Database
  • HTML
  • CSS
  • JavaScript
  • Ajax
  • jQuery
  • Bootstrap
  • Google Material Icon
  • Material Kit 2 Template

This Online Market Place Site in PHP is composed of 3 User Interfaces which are the Admin Panel, Seller Panel, and Public Site. The Admin Panel is the side of the system where the system management can manage all the project data. Admin Users have the privilege to access and manage all the products or items that the seller published. They can also manage the list of users where they can update and delete sellers’ data. The Seller Panel is the side of the system where the seller can manage their published items. The seller can add images and some information about the product that they are selling such as the item’s specifications. They can set the quantity or stock that they have in each item they published. On the Public Site, site visitors or anonymous users can search for their desired product to check if someone posted a product that they wanted. Users can list all the available products and view each item’s details. The posted product details also contain or display the seller’s basic information and links where the possible buyer can contact them.

****Features********Admin-Side****

  • Home Page
    • Display the summary of the list.
  • Category Management
    • Add New Category
    • List All Categories
    • View Category Details
    • Edit Category Details
    • Delete Category Details
  • User Management
    • Add New User
    • List All Users
    • View User Details
    • Edit User Details
    • Reset User Password
    • Delete User Details
  • Product Management
    • List All Products
    • View Product Details
    • Edit Product Details
    • Delete Product Details
  • Update System Information
  • Update Account Details/Credentials
  • Login and Logout

****Seller-Side****

  • Home Page
    • Display the summary of the list.
  • Product Management
    • Add New Product
    • List All Products
    • View Product Details
    • Edit Product Details
    • Delete Product Details
  • Update Account and Contact Details/Credentials
  • Login and Logout

****Public-Side****

  • Home Page
    • Display the Welcome Content.
  • ‘About Us’ Content
  • List All Available Products
  • View Product Details
  • Redirect to Seller’s Website
  • Redirect to Seller’s FB Page
  • Get Seller’s Contact Details
  • Search Product

The source code was developed only for educational purposes only. You can download the source code for free and modify it the way you wanted.

**System Snapshots of some Features******Public Site****

****Product List (Public-Side)****

****Product Details****

****Seller Registration Form****

****Seller Panel****

****Admin Panel****

How to Run ??

****Requirements****

  • Download and Install any local web server such as XAMPP.
  • Download the provided source code zip file. (download button is located below)
  • Download the project assets at https://www.dropbox.com/s/uc5o9fr9ejpeg5d/php_omps_assets.zip?dl=1

****System Installation/Setup****

  1. Enable the GD Library in your php.ini file.
  2. Open your XAMPP Control Panel and start ****Apache**** and ****MySQL****.
  3. Extract the downloaded source code zip file.
  4. Copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory.
  5. Extract the downloaded assets zip file.
  6. Copy the extracted assets folder and paste it into the source code root path.
  7. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  8. Create a new database naming ****omps_db****.
  9. Import the provided ****SQL**** file. The file is known as ****omps_db.sql**** located inside the database folder.
  10. Browse the Online Market Place Site in PHP in a browser. i.e. ****http://localhost/omps/****.

****Admin Default Access:****

Username: admin
Password: admin123

****Sample Seller Access:****

Username: mcooper
Password: mcooper123

****DEMO VIDEO****

That’s it. You can now explore the features and functionalities of this Online Market Place Site in PHP. I hope this will help you with what you are looking for and you’ll find something useful for your future projects.

Explore more on this website for more Free Source Codes and Tutorials.

Enjoy :)

  • 3428 views

Related news

Online Market Place Site 1.0 Cross Site Scripting

Online Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907