| शीर्षक | SourceCodester E-Learning System (CAIWL) 1.0 Stored HTML Injection Vulnerability |
|---|
| विवरण | A Stored HTML Injection vulnerability was discovered in the E-Learning System (CAIWL) v1.0. The application fails to properly sanitize user input in the Lesson Module description and title fields. This allows an authenticated attacker to inject arbitrary HTML tags into the application, which are then stored in the database and rendered by the browser when an administrator or user views the affected lesson. This vulnerability enables web defacement, content spoofing, and potential phishing attacks. |
|---|
| स्रोत | ⚠️ https://gist.github.com/0xCaptainFahim/dada955760b424a851de12bccadee997 |
|---|
| उपयोगकर्ता | 0xCaptainFahim (UID 86447) |
|---|
| सबमिशन | 10/01/2026 07:57 AM (9 महीनों पहले) |
|---|
| संयम | 18/01/2026 03:05 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 341747 [SourceCodester E-Learning System 1.0 Lesson index.php Title/Description क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|