HTML-Injection

Dear Ladies and Gentlemen,

First of all thank you for your time and effort reading my Report.

While doing the Penetration Test i was able to identify an reflected HTML-Injection.

The Process of the Vulnerability:

1. Login
2. Go to https://roy.demo.phpmyfaq.de/admin/?action=tags
3. Type any kind of HTML Code and it will be interpreted as HTML Code
   Example for the HTML Code:
   <h1> HTML INJECTION BY AHMED HASSAN</h1>
   or
   </h2>special offer <a href>malicious link</a><h2>

The Attacker can inject Link, Phishing Links, etc. to inject malicious Code

Through this, any Attacker can inject HTML Code and use further Vulnerabilities to use other Exploitation Steps.

At the end, I want to thank you for your time and effort and hope hearing from you soon.

Best regards
Ahmed Hassan