CVE-2018-19598: Improper Neutralization of Input During Web Page Generation

Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request...

PT-2018-13277

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.5 Description The issue allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field. Recommendations For PHP Scrip...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2018-17868)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in Monstra CMS version 3.0.4. The vulnerability can be exploited ...

CVE-2018-15897: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn...

PT-2018-12800

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific fields in the edit profile page,...

PHP Scripts Mall Car Rental Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Car Rental Script is a set of car rental website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Car Rental Script version 2.0.8. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...

CVE-2018-14922: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name field in the edit profile page...

PHP Scripts Mall hotel-booking-script Cross-Site Scripting Vulnerability

PHP Scripts Mall hotel-booking-script is a multi-vendor hotel booking script. PHP Scripts Mall hotel-booking-script 2.0.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the First Name, Last Name or Address fields...

CVE-2018-15191

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

CVE-2018-15190

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

CVE-2018-15190

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

CVE-2018-15190: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

PT-2018-12938

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field. Recommendations For PHP Scripts Mall...

CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

PT-2018-12937

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows for XSS attacks through the First Name, Last Name, or Address field. Recommendations For version 2.0.4, update to a newer version that contains a fix for this iss...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...

PT-2018-12572

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Basic B2B Script version 2.0.0 Description The issue concerns Reflected and Stored XSS that can be triggered via specific fields, including First name, Last name, Address 1, City, State, and Company name. Recommendations For P...

CVE-2018-14541: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

DomainMod cross-site scripting vulnerability (CNVD-2018-10862)

DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.10.0. A remote attacker can exploit this vulnerability to execute JavaScript code with the help of t...