Loading HuntDB...

HTML injection

I
Infogram
Submitted None
Reported by nihadrekanym

Vulnerability Details

Technical details and impact analysis

hi team ... i found HTML i on https://infogram.com/app/#/library step .. 1- go to https://infogram.com/app/#/library 2- choose Report Templates . 3- Use Report Classic 4- click to edit_data 5- edit cell __Employee ID__ 5- payload > <h1>hacked</h1> <marquee behavior="scroll" direction="left">hacked</marquee> <h1 style="background-color:#000099;">hacked</h1> 6-execute HTML .. POC .. video on attached

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted