CVE-2024-55059

A stored HTML Injection vulnerability exists in PHPGurukul Online Birth Certificate System v1.0 within the /user/certificate-form.php endpoint. The root cause is the application's lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload ...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

Sunbird DCIM dcTrack version 9.1.2 is affected by an HTML injection vulnerability. An attacker authenticated as an administrator can inject arbitrary HTML code into an admin screen. While the vulnerability allows for unauthorized content injection, specific details regarding the underlying techni...

CVE-2024-37773: Improper Control of Generation of Code

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-55100: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Online Nurse Hiring System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fullname parameter...

PT-2024-27743

Name of the Vulnerable Software and Affected Versions Sunbird DCIM dcTrack version 9.1.2 Description An HTML injection issue allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. This can be exploited by attackers with administrative access to inject...

Sunbird DCIM dcTrack security vulnerability

Sunbird DCIM dcTrack is an asset monitoring and management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of an HTML injection vulnerability that allows an attacker authenticated as an administrator to inject...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

UBUNTU-CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

MetaCPAN Graphics::ColorNames has a security vulnerability

MetaCPAN Graphics::ColorNames is an interface from the MetaCPAN Foundation. It is used to define RGB values for common color names. A security vulnerability exists in MetaCPAN Graphics::ColorNames versions prior to 3.2.0, which stems from an ambiguity between a module and a file name, and allows ...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

CVE-2024-55918: Improper Control of Generation of Code

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

PT-2024-36610 · Unknown · Graphics::Colornames

Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...

CVE-2024-55918

The Graphics::ColorNames package for Perl (versions prior to 3.2.0 ) contains a vulnerability where an ambiguity exists between modules and filenames. An attacker capable of creating a file in the current working directory can exploit this to perform HTML injection . To remediate this issue, user...