Lucene search
+L

367 matches found

Exploit DB
Exploit DB
•added 2018/05/29 12:00 a.m.•44 views

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery

Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 Description : Facebook Clone Script 1.0.5 has csrf vulnerability which attacker ca...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/05/29 12:00 a.m.•20 views

Facebook Clone Script 1.0.5 - search SQL Injection

Facebook Clone Script 1.0.5 - search SQL Injection Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 POC : SQLi : Parameter : search Typ...

SaveExploits0
Exploit DB
Exploit DB
•added 2018/05/29 12:00 a.m.•52 views

Facebook Clone Script 1.0.5 - 'search' SQL Injection

Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 POC : SQLi : Parameter : search Type : Union based Payload : 1' UNION SELECT...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/05/29 12:00 a.m.•18 views

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 Description : Facebook...

0.8AI score
SaveExploits0
zdt
zdt
•added 2018/05/29 12:00 a.m.•42 views

Facebook Clone Script 1.0.5 - search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 POC : SQLi : Parameter : search Type : Union base...

7.1AI score
SaveExploits0
zdt
zdt
•added 2018/05/29 12:00 a.m.•47 views

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 Description : Facebook Clone Script 1.0.5 has...

0.3AI score
SaveExploits0
OSV
OSV
•added 2018/05/28 2:29 p.m.•18 views

CVE-2018-11514

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...

8.8CVSS5.8AI score0.01126EPSS
SaveExploits1References1
Prion
Prion
•added 2018/05/28 2:29 p.m.•24 views

Unrestricted file upload

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...

6.5CVSS8.6AI score0.01126EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/05/28 2:00 p.m.•55 views

CVE-2018-11514

The CVE affects PHP Scripts Mall Naukri Clone Script (version 3.0.3 and earlier). The vulnerability resides in edit_resume_det.php, allowing Unrestricted Upload of a File with a Dangerous Type (e.g., renaming .docx to .php). This could enable an attacker to upload a malicious PHP file, potentiall...

8.8CVSS8.6AI score0.01126EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/28 12:00 a.m.•4 views

CVE-2018-11514: Unrestricted Upload of File with Dangerous Type

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...

8.8CVSS7.8AI score0.01126EPSS
SaveExploits1References2
NVD
NVD
•added 2018/04/12 10:29 p.m.•26 views

CVE-2018-6903

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.8CVSS8.7AI score0.01033EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/04/12 10:00 p.m.•36 views

CVE-2018-6903

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.7AI score0.01033EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/12 12:00 a.m.•4 views

CVE-2018-6903: Improper Input Validation

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.8CVSS7.9AI score0.01033EPSS
SaveExploits1References2
NVD
NVD
•added 2018/04/09 7:29 a.m.•30 views

CVE-2018-9857

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

6.1CVSS6.1AI score0.02151EPSS
SaveExploits5References2
Prion
Prion
•added 2018/04/09 7:29 a.m.•19 views

Design/Logic Flaw

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

4.3CVSS5.9AI score0.02151EPSS
SaveExploits5References2Affected Software1
OSV
OSV
•added 2018/04/09 7:29 a.m.•14 views

CVE-2018-9857

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

6.1CVSS5.8AI score0.02151EPSS
SaveExploits5References2
CVE
CVE
•added 2018/04/09 7:00 a.m.•91 views

CVE-2018-9857

CVE-2018-9857 concerns PHP Scripts Mall Match Clone Script 1.0.4. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the searchbyid.php “View Search By Id” screen in the product’s search field. Attackers can inject arbitrary scripts, as demonstrated by PoCs in the linked exploit r...

6.1CVSS5.9AI score0.02151EPSS
SaveExploits5References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/09 12:00 a.m.•4 views

CVE-2018-9857: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

6.1CVSS6.3AI score0.02151EPSS
SaveExploits5References2
CNVD
CNVD
•added 2018/04/09 12:00 a.m.•14 views

PHP Scripts Mall Match Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Match Clone Script is a matrimonial dating software from PHP Scripts Mall India. The program features live chat, privacy protection and member registration. A cross-site scripting vulnerability exists in PHP Scripts Mall Match Clone Script version 1.0.4. A remote attacker can...

6.1CVSS6.4AI score0.02151EPSS
SaveExploits5References1
NVD
NVD
•added 2018/04/05 7:29 p.m.•26 views

CVE-2018-9328

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

6.1CVSS6.1AI score0.00669EPSS
SaveExploits1References1
Rows per page
Query Builder