2 matches found
PT-2018-17809
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Broker Script version 3.0.6 Description The issue concerns a problem where an attacker can inject malicious code via the Last Name field on the My Profile page, potentially leading to unauthorized actions on the websit...
5.4CVSS0.00513EPSS
SaveExploits1References3
CVE-2018-6900: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page...
5.4CVSS5.9AI score0.00513EPSS
SaveExploits1References2
20