Gửi #261101: Engineers Online Portal Web 1.0 stored HTML Injection in the surname and lstname of any Engineerthông tin

tiêu đềEngineers Online Portal Web 1.0 stored HTML Injection in the surname and lstname of any Engineer
Mô tảDear Janno palacios, I hope this message finds you well. I would like to express my gratitude for your valuable time and attention. My brother and I have successfully identified a medium-level vulnerability, "stored HTML Injection in the surname and lstname of any Engineer", within your Engineers Online Portal Application. Consequently, I am writing this email to provide you with a comprehensive Proof of Concept, including a video demonstration and relevant screenshots. Furthermore, I would like to kindly request your consideration in assigning a CVE identifier to this discovery. I have attached a previous example for the same application for your reference. Link for the previous CVE https://vuldb.com/?id.249182 Thank you once again for your time, and I look forward to your response. Sincerely, Ahmed Hassan ----- stored HTML Injection in the surname and lastname of any Engineer Lets see :) Thank you for watching :)
Nguồn⚠️ https://mega.nz/file/CcV3CTqI#-elnFzb3iHsty3s2ElDVRECjU_uLKPwua2NHQzN3Hc4
Người dùng
 ahmed8199 (UID 60803)
Đệ trình01/01/2024 22:24 (cách đây 3 những năm)
Kiểm duyệt02/01/2024 11:23 (13 hours later)
Trạng tháiBản sao
Mục VulDB249442 [RRJ Nueva Ecija Engineer Online Portal 1.0 Add Enginer /admin/edit_teacher.php Firstname/Lastname Tập lệnh chéo trang]
điểm0

Interested in the pricing of exploits?

See the underground prices here!