EIP-2026-110441
PRE-CVEPacketFence Network Access Controller - Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-110441. PoCs published by K053.
AI-analyzed exploit summary The exploit describes an input validation flaw in PacketFence's Login.php, specifically in the `check_input` and `check_sensitive_input` functions, which fail to properly sanitize user input, leading to XSS and HTML injection vulnerabilities. The PoC demonstrates how an attacker can inject malicious scripts via the username field.
Description
PacketFence Network Access Controller - Cross-Site Scripting
Exploits (1)
The exploit describes an input validation flaw in PacketFence's Login.php, specifically in the `check_input` and `check_sensitive_input` functions, which fail to properly sanitize user input, leading to XSS and HTML injection vulnerabilities. The PoC demonstrates how an attacker can inject malicious scripts via the username field.