CVE-2026-120648
2026-11-04
00h17 +00:00
00h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment.
Arguments are placed between without escaping, so text containing --> closes the comment early.
An application that passes request data to comment can be made to inject HTML into the page.
CVE 정보
관련 약점
| 약점 이름 | 출처 | |
|---|---|---|
| Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
