Design/Logic Flaw

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

PHP Scripts Mall Classified Ads Script Reflective HTML Injection Vulnerability

PHP Scripts Mall Classified Ads Script is a classified ads script. PHP Scripts Mall Classified Ads Script 3.2.2 suffers from a reflected HTML injection vulnerability. An attacker can exploit this vulnerability to perform HTML injection via a search form...

PHP Scripts Mall Image Sharing Script HTML Injection Vulnerability

PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. PHP Scripts Mall Image Sharing Script 1.3.4 suffers from an HTML injection vulnerability. The vulnerability can be exploited to achieve HTML...

CVE-2019-7438

cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...

CVE-2019-7438

CVE-2019-7438 affects JioFi 4G M2S 1.0.2 devices; vulnerability in cgi-bin/qcmap_web_cgi allows XSS/HTML injection via the mask POST parameter, with exploit examples and public writeups (exploit-db, PacketStorm, etc.). Impact described as client-side script injection; CVSS metrics in sources show...

CVE-2019-7435

CVE-2019-7435 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2, which shows a reflected HTML injection vulnerability via the Search Form. The root cause is reflected HTML injection in the search functionality, enabling an attacker to manipulate HTML output. The CVSS details indicat...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

CVE-2019-7430

The CVE-2019-7430 entry documents a vulnerability in PHP Scripts Mall Image Sharing Script 1.3.4, described as an HTML injection via the Search Bar. The affected component is the image sharing script’s Search Bar handling; root cause details are not expanded beyond the HTML injection claim in the...

CVE-2018-20645

Summary of CVE-2018-20645 : The vulnerability affects PHP Scripts Mall Basic B2B Script 2.0.9, with HTML injection possible through the First Name or Last Name fields. The initial disclosure lists a CVSS base score of 5.4 (Medium) on CVSS 3.0 and 3.5 (Low) on CVSS 2.0, indicating a moderate impac...

CVE-2018-20645

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20639

CVE-2018-20639 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, with an HTML injection vulnerability exploitable via the Search Bar. The connected sources consistently describe HTML injection in this product edition and do not provide specific exploit code, versions beyond 3.0.1, or...

CVE-2018-20639

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20636

CVE-2018-20636 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability is HTML injection via the First Name field. Public references confirm the product/version and injection class; CVSS v3.0 base score is 5.4 (MEDIUM) with network access and user interaction requ...

CVE-2018-20636

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20627

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

Gitea 1.7.3 HTML Injection

Gitea 1.7.3 stored HTML injection XSS Information =========== Name: Gitea 1.7.0 - 1.7.3 stored HTML injection Software: Gitea - a self-hosted Git service Homepage: https://gitea.io/ Vulnerability: stored HTML injection Affected: 1.7.0 - 1.7.3 Tested: 1.7.2, 1.7.3 Fixed: 1.7.4 Prerequisites: edit...

Design/Logic Flaw

DISPUTED The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the...

DEBIAN-CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

UBUNTU-CVE-2019-9834

DISPUTED The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the...