15996 matches found
Exploit for CVE-2024-54160
CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...
CVE-2024-55059
A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...
PHPGurukul Online Birth Certificate System 安全漏洞
Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...
CVE-2024-55059
A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...
CVE-2024-55059
CVE-2024-55059 concerns HTML injection in the PHPGurukul Online Birth Certificate System v1.0, triggered by input submitted to /user/certificate-form.php. Connected sources consistently describe the vulnerability as arising from insufficient filtering/escaping of user data, allowing injection of ...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37773
CVE-2024-37773 describes an HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 . Authenticated administrators can inject arbitrary HTML into an admin screen, potentially affecting the admin UI. The vulnerability is described with a CVSS v3.1 base score of 4.8 (Medium) , with network attac...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
Sunbird DCIM dcTrack 安全漏洞
Sunbird DCIM dcTrack is an asset monitoring and management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of an HTML injection vulnerability that allows an attacker authenticated as an administrator to inject...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
UBUNTU-CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
CVE-2024-55918
An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...
MetaCPAN Graphics::ColorNames 安全漏洞
MetaCPAN Graphics::ColorNames is an interface from the MetaCPAN Foundation. It is used to define RGB values for common color names. A security vulnerability exists in MetaCPAN Graphics::ColorNames versions prior to 3.2.0, which stems from an ambiguity between a module and a file name, and allows ...
CVE-2024-55918
CVE-2024-55918 affects the Perl package Graphics::ColorNames prior to version 3.2.0. Affected: module/filename ambiguity in ColorNames can allow HTML injection if an attacker can create a file in the current working directory. Remediation: upgrade to 3.2.0 or later (per PT-2024-36610). Public sou...
PT-2024-36610 · Unknown · Graphics::Colornames
Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...