CVE-2024-57175

CVE-2024-57175: 저장된 교차 사이트 스크립팅 XSS - PHPGURUKUL 온라인 출생 증명서 시스템 v1.0 설명 PHPGURUKUL Online Birth Certificate System v1.0의 /user/certificate-form.php 페이지에서 저장된 교차 사이트 스크립팅XSS 취약점이 발견되었습니다. 이 취약점은 인증된 사용자가 프로필 이름 필드에 악성 XSS 스크립트를 주입할 수 있도록 하여, 클라이언트 측에서 코드 실행을 초래할 수 있습니다. 재현 단계 PoC 1. 인증된 사용자로 취약한...

EUVD-2015-6474

Malware in sbrugna...

EUVD-2024-51958

Malicious code in bioql PyPI...

CVE-2025-58174

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script for example a script element. An...

CVE-2025-58174 LAM profile editor stored cross-site scripting vulnerability

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script for example a script element. An...

CVE-2025-58174

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script for example a script element. An...

LDAP Account Manager 跨站脚本漏洞

LDAP Account Manager LAM is a web front-end to the LDAP Account Manager open source for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory. A cross-site scripting vulnerability exists in LDAP Account Manager LAM versions prior to 9.3, which stems from a profile name...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

CVE-2025-55618

The Hyundai Navigation App (version STD5W.EUR.HMC.230516.afa908d ) is vulnerable to an HTML injection flaw due to improper neutralization of input during web page generation. An attacker can inject HTML payloads into the profile name field, which are subsequently rendered by the application. To m...

CVE-2025-55618

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

PT-2025-34936

Name of the Vulnerable Software and Affected Versions: Hyundai Navigation App version STD5W.EUR.HMC.230516.afa908d Description: An attacker can inject HTML payloads into the profile name field within the navigation application, leading to the rendering of the injected content. Recommendations:...

Hyundai Navigation App 安全漏洞

Hyundai Navigation App is a mobile application for navigation and Telematics services from Hyundai Motor Hyundai, South Korea. A security vulnerability exists in Hyundai Navigation App that stems from improper handling of the profile name field, which could lead to HTML injection...

CVE-2025-55618: Improper Neutralization of Input During Web Page Generation

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...

CVE-2021-20128

The Profile Name field in the floor plan Network Menu page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized...

CVE-2024-48170

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via a crafted payload injected into the name in the profile.php...

CVE-2024-57175

A Stored Cross-Site Scripting XSS vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php...

PT-2025-3407 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Online Birth Certificate System version 1.0 Description: A Stored Cross-Site Scripting XSS issue was identified in the PHPGURUKUL Online Birth Certificate System. The issue arises via the profile name to the...

Exploit for Cross-site Scripting in Phpgurukul Online_Birth_Certificate_System

CVE-2024-57175: Stored Cross-Site Scripting XSS in PHPGURUKUL...

CVE-2024-53365: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/profile.php. This vulnerability allows authenticated users to inject malicious XSS scripts into the profile name field...