Lucene search

K
huntrMike9937DE20F21-4A9B-445D-AE2B-15ADE648900B
HistoryNov 04, 2022 - 10:30 a.m.

Html Injection Reflected in Login Page

2022-11-0410:30:50
mike993
www.huntr.dev
17
html injection
login page
vulnerability
security bug

0.001 Low

EPSS

Percentile

36.3%

Description

HTML Injection is a vulnerability in which the attacker can inject malicious html content in the login webpage.

Proof of Concept

#Navigate to:
https://demo.froxlor.org/index.php?showmessage=4&customermail=%22%3Cmarquee%3E%3Ch3%3EHTML/INJECTION/HERE%[email protected]

0.001 Low

EPSS

Percentile

36.3%

Related for 7DE20F21-4A9B-445D-AE2B-15ADE648900B