EUVD-2017-8796

Malware in sbrugna...

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script is a set of online group buying deal scripts from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script version 3.0.2. A remote attacker can exploit this...

CVE-2018-6868

Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...

CVE-2018-6868

Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...

CVE-2018-6868

CVE-2018-6868 affects PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script 3.0.2. The issue is a Cross-Site Scripting vulnerability exposed via a User Profile Field parameter in the web app. PoC and multiple public exploits indicate a stored XSS vector, demonstrated in PoC examples (e.g., sc...

PT-2018-17792

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script version 3.0.2 Description A Cross Site Scripting XSS issue exists, allowing for potential code injection via a User Profile Field parameter. Recommendations For version 3.0.2, avoid...

CVE-2018-6868: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...

Groupon Clone Script 3.0.2 - Cross-Site Scripting

Groupon Clone Script 3.0.2 - Cross-Site Scripting. CVE-2018-6868. Webapps exploit for PHP platform Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Groupon Clone Script 3.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application...

PHP Scripts Mall Groupon Clone Script SQL Injection Vulnerability

PHP Scripts Mall Groupon Clone Script is a set of PHP based trade management scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Groupon Clone Script version 3.01. A remote attacker can exploit the vulnerability by sending the 'stateid' parameter to the...

CVE-2017-17638

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

CVE-2017-17638

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

Sql injection

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

CVE-2017-17638

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

CVE-2017-17638

The CVE relates to Groupon Clone Script 3.01, where an SQL Injection vulnerability exists in city_ajax.php via the state_id parameter. Public references (Exploit-DB, Packet Storm) indicate a remote attacker could leverage this to inject SQL commands. The CVSS metrics indicate a high severity (AV:...

PT-2017-14934

Name of the Vulnerable Software and Affected Versions Groupon Clone Script version 3.01 Description The issue is related to SQL Injection, which can be exploited via the state id parameter in the "city ajax.php" endpoint. Recommendations For Groupon Clone Script version 3.01, update the script to...

CVE-2017-17638: Improper Neutralization of Special Elements used in an SQL Command

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

Groupon Clone Script 3.01 SQL Injection

Exploit Title: Groupon Clone Script 3.01 - 'stateid' 's' SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Version: 3.01 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Groupon Clone Script 3.01 - state_id search SQL Injection

Groupon Clone Script 3.01 - stateid search SQL Injection Exploit Title: Groupon Clone Script 3.01 - 'stateid' 's' SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Version: 3.01...

Groupon Clone Script 3.01 - catid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Groupon Clone Script v3.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/groupon-clone-script/ Demo:...