CVE-2024-57175

CVE-2024-57175: PHPGURUKUL Online Birth Certificate System v1.0 における格納型クロスサイトスクリプティング（XSS） 説明 PHPGURUKUL Online Birth Certificate System v1.0 の /user/certificate-form.php ページに格納型クロスサイトスクリプティング（XSS）の脆弱性が確認されました。この脆弱性により、認証されたユーザーはプロフィール名フィールドに悪意のあるXSSスクリプトを注入でき、クライアント側でコードが実行される可能性があります。 再現手順（PoC）...

EUVD-2015-6474

Malware in sbrugna...

EUVD-2024-51958

Malicious code in bioql PyPI...

CVE-2025-58174

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script for example a script element. An...

CVE-2025-58174 LAM profile editor stored cross-site scripting vulnerability

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script for example a script element. An...

LDAP Account Manager 跨站脚本漏洞

LDAP Account Manager LAM is a web front-end to the LDAP Account Manager open source for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory. A cross-site scripting vulnerability exists in LDAP Account Manager LAM versions prior to 9.3, which stems from a profile name...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

Hyundai Navigation App 安全漏洞

Hyundai Navigation App is a mobile application for navigation and Telematics services from Hyundai Motor Hyundai, South Korea. A security vulnerability exists in Hyundai Navigation App that stems from improper handling of the profile name field, which could lead to HTML injection...

CVE-2025-55618: Improper Neutralization of Input During Web Page Generation

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

PT-2025-34936 · Hyundai · Hyundai Navigation App

Name of the Vulnerable Software and Affected Versions: Hyundai Navigation App version STD5W.EUR.HMC.230516.afa908d Description: An attacker can inject HTML payloads into the profile name field within the navigation application, leading to the rendering of the injected content. Recommendations:...

CVE-2025-55618

The Hyundai Navigation App (version STD5W.EUR.HMC.230516.afa908d ) is vulnerable to an HTML injection flaw due to improper neutralization of input during web page generation. An attacker can inject HTML payloads into the profile name field, which are subsequently rendered by the application. To m...

CVE-2021-20128

The Profile Name field in the floor plan Network Menu page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized...

CVE-2024-48170

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via a crafted payload injected into the name in the profile.php...

CVE-2024-57175

A Stored Cross-Site Scripting XSS vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php...

PT-2025-3407 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Online Birth Certificate System version 1.0 Description: A Stored Cross-Site Scripting XSS issue was identified in the PHPGURUKUL Online Birth Certificate System. The issue arises via the profile name to the...

Exploit for Cross-site Scripting in Phpgurukul Online_Birth_Certificate_System

CVE-2024-57175: Stored Cross-Site Scripting XSS in PHPGURUKUL...

CVE-2024-53365: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/profile.php. This vulnerability allows authenticated users to inject malicious XSS scripts into the profile name field...

CVE-2024-26489

A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field...