Design/Logic Flaw

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

CVE-2021-23225

CVE-2021-23225 (Cacti 1.1.38) : An authenticated user with User Management permissions can inject arbitrary web script or HTML in the “new_username” field when creating a new user via the Copy method in user_admin.php. The vulnerability’s impact is described as cross-site scripting (XSS). Debian'...

CVE-2021-3816

CVE-2021-3816 affects Cacti 1.1.38. An authenticated user with User Management permissions can inject arbitrary HTML into the group_prefix field when creating a new group via the Copy method in user_group_admin.php. This constitutes an HTML injection vulnerability in the group creation workflow. ...

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

CVE-2021-23225: Improper Neutralization of Input During Web Page Generation

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

PT-2022-10696

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.38 Description The issue allows authenticated users with User Management permissions to inject arbitrary HTML in the group prefix field during the creation of a new group via the "Copy" method at the "user group admin.php"...

CVE-2021-3816: Improper Neutralization of Input During Web Page Generation

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

PT-2022-15042

Name of the Vulnerable Software and Affected Versions OnionShare versions 2.4 and earlier Description The path parameter of the requested URL is not sanitized before being passed to the QT frontend, leading to a rendered HTML4 Subset in the Onionshare frontend. This issue affects the display of...

Multiple XSS and HTML injection attacks in setup script

PMASA-2022-2 Announcement-ID: PMASA-2022-2 Date: 2022-01-10 Summary Multiple XSS and HTML injection attacks in setup script Description A series of weaknesses has been discovered that could allow an attacker to inject malicious code in to aspects of the setup script, which can allow XSS or HTML...

Mattermost: html injection via invite members can be leads account takeover

An HTML injection vulnerability was found on the website that allowed an attacker to inject HTML code into an email invitation sent to a victim. This could lead to the victim being redirected to a malicious site or tricked into giving away login credentials...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46079

CVE-2021-46079 affects Sourcecodester Vehicle Service Management System 1.0. The vulnerability is an unrestricted file upload that enables a remote attacker to upload malicious files, leading to HTML injection . Multiple sources (NVD, Red Hat, CVE lists) corroborate this description. The availabl...

PT-2022-12556

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description An Unrestricted File Upload issue exists, allowing a remote attacker to upload malicious files, which can lead to Html Injection. Recommendations For Sourcecodester Vehic...