Description

There is no input field length in update username where any user can able to add large number of characters like imagine we can add more 5000+ character on to the update name field .

Steps to Reproduce

• Visit the particular URL Vulnerable-link
• Where there is a functionality to update our own profile
• In the name field , Enter the following payload now update the profile
• As you can see without any length validation , our payload got updated on to the profile

Impact of this Vulnerability:

An attacker would make use of this vulnerability and this leads to

• Memory corruption
• Denial of Service