CVE-2019-9607: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...

Medical Store Script 3.0.3 Cross Site Scripting

Exploit Title: Medical Store Script 3.0.3 - Cross Site Scripting Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 20, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link : https://www.phpscriptsmall.com/product/medical-store-script/ Teste...