CVE-2019-7435: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

PT-2019-18608

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...

CVE-2019-7432: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

PT-2019-18611

Name of the Vulnerable Software and Affected Versions JioFi 4G M2S version 1.0.2 Description The issue concerns the cgi-bin/qcmap web cgi endpoint on the affected device, where an attacker can exploit XSS and HTML injection vulnerabilities via the mask POST parameter. Recommendations For version...

CVE-2018-20636: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20645: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20627: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

PT-2019-10132

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue concerns HTML injection via the First Name field. Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Nam...

CVE-2019-7430: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

PT-2019-18603

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...

PT-2019-18605

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns HTML injection via the STREET field in the Profile Edit section. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update the software to a...

Gitea 1.7.3 HTML Injection

Gitea 1.7.3 stored HTML injection XSS Information =========== Name: Gitea 1.7.0 - 1.7.3 stored HTML injection Software: Gitea - a self-hosted Git service Homepage: https://gitea.io/ Vulnerability: stored HTML injection Affected: 1.7.0 - 1.7.3 Tested: 1.7.2, 1.7.3 Fixed: 1.7.4 Prerequisites: edit...

CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

Design/Logic Flaw

DISPUTED The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the...

CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

DEBIAN-CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

UBUNTU-CVE-2019-9834

DISPUTED The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the...

CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

CVE-2019-9834

The CVE-2019-9834 issue affects the Netdata web application up to version 1.13.0, where an HTML Injection flaw allows remote attackers to inject attacker-supplied HTML into an imported snapshot. This can execute in the user’s browser context, potentially stealing authentication credentials or alt...