20194 matches found
Design/Logic Flaw
In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks...
CVE-2021-34419
The CVE-2021-34419 issue affects the Zoom Client for Meetings on Ubuntu Linux before version 5.1.0. The vulnerability is an HTML injection flaw triggered when a remote control request is sent to a user during in-meeting screen sharing, potentially enabling targeted social engineering. The availab...
GitLab: Stored XSS on issue comments and other pages which contain notes
Summary This report contains two XSS sanitization bypasses: The SyntaxHighlightFilter creates html from unsanitized data. This can be used to bypass the XSS filter on the server-side. ruby def highlightnodenode ... sourcepos = node.parent.attr'data-sourcepos' ... sourceposattr = sourcepos ?...
CVE-2021-34419: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting screen sharing. This could allow meeting participants to be targeted for social engineering attacks...
PT-2021-7428
Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings for Ubuntu Linux versions prior to 5.1.0 Description The issue is related to an HTML injection flaw that occurs when sending a remote control request to a user during in-meeting screen sharing. This could allow meeting...
Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...
Code Injection in tsolucio/corebos
Description The user can control a point and infuse arbitrary HTML code into a vulnerable web page. This vulnerability can have numerous results, like disclosure of a user’s session treats that might be utilized to impersonate the victim, or, more generally, it can permit the aggressor to alter t...
CVE-2021-42663
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
CVE-2021-42663
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
Design/Logic Flaw
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
CVE-2021-42663
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
CVE-2021-42663
Sourcecodester Online Event Booking and Reservation System 2.3.0 is affected by a cross-site scripting vulnerability (HTML injection) in the /event-management/index.php page, via the msg parameter. The vulnerable component is index.php; an attacker-supplied payload in msg can cause the victim to ...
PT-2021-5308
Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements, allowing a remote attacker to exploit it and potentially disclo...
CVE-2021-26844: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe...
ImportExportTools NG 10.0.4 - HTML Injection
Exploit Title: ImportExportTools NG 10.0.4 - HTML Injection Date: 2021-11-05 Exploit Author: Vulnerability Lab Vendor Homepage: https://github.com/thundernest/import-export-tools-ng Software Link: https://addons.thunderbird.net/en-US/thunderbird/addon/importexporttools-ng/ Version: 10.0.4 Tested...
CVE-2021-42663: Improper Neutralization of Input During Web Page Generation
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
ImportExportTools NG 10.0.4 - HTML Injection Vulnerability
Exploit Title: ImportExportTools NG 10.0.4 - HTML Injection Date: 2021-11-05 Exploit Author: Vulnerability Lab Vendor Homepage: https://github.com/thundernest/import-export-tools-ng Software Link: https://addons.thunderbird.net/en-US/thunderbird/addon/importexporttools-ng/ Version: 10.0.4 Tested...
ImportExportTools NG 10.0.4 - HTML Injection Vulnerability
Document Title: =============== ImportExportTools NG 10.0.4 - HTML Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2308 Release Date: ============= 2021-11-05 Vulnerability Laboratory ID VL-ID: ===================================...
ImportExportTools NG 10.0.4 HTML Injection
Document Title: =============== ImportExportTools NG 10.0.4 - HTML Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2308 Release Date: ============= 2021-11-05 Vulnerability Laboratory ID VL-ID: ===================================...
