HTML Injection

Directus is vulnerable to HTML Injection. The vulnerability is due to the filtering of restricted characters, such as HTML tags, being implemented on the client-side, which can be bypassed. It allowing an attacker to inject malicious HTML content...

Exploit for CVE-2024-54160

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...

Exploit for CVE-2024-54160

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...

PT-2024-36467

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Birth Certificate System version 1.0 Description A stored HTML Injection issue was identified in the /user/certificate-form.php endpoint. This allows for the injection of malicious HTML code, potentially leading to security...

CVE-2024-55059

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...

CVE-2024-55059: Improper Neutralization of Input During Web Page Generation

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...

PHPGurukul Online Birth Certificate System has a security vulnerability

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...

CVE-2024-55059

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...

CVE-2024-55059

A stored HTML Injection vulnerability exists in PHPGurukul Online Birth Certificate System v1.0 within the /user/certificate-form.php endpoint. The root cause is the application's lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload ...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37773

Sunbird DCIM dcTrack version 9.1.2 is affected by an HTML injection vulnerability. An attacker authenticated as an administrator can inject arbitrary HTML code into an admin screen. While the vulnerability allows for unauthorized content injection, specific details regarding the underlying techni...

CVE-2024-37773: Improper Control of Generation of Code

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-55100: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Online Nurse Hiring System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fullname parameter...

PT-2024-27743

Name of the Vulnerable Software and Affected Versions Sunbird DCIM dcTrack version 9.1.2 Description An HTML injection issue allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. This can be exploited by attackers with administrative access to inject...

Sunbird DCIM dcTrack security vulnerability

Sunbird DCIM dcTrack is an asset monitoring and management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of an HTML injection vulnerability that allows an attacker authenticated as an administrator to inject...

CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

CVE-2024-55918

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...