Lucene search
+L

1163 matches found

NVD
NVD
added 2018/03/06 3:29 p.m.25 views

CVE-2018-7650

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...

4.8CVSS5.1AI score0.00539EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/03/06 3:0 p.m.27 views

CVE-2018-7650

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...

5AI score0.00539EPSS
SaveExploits1References1
CVE
CVE
added 2018/03/06 3:0 p.m.45 views

CVE-2018-7650

Summary: CVE-2018-7650 corresponds to a stored XSS in PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, specifically in the Add New section for a Management User. The issue arises because the input in the name parameter is not sanitized, allowing injected JavaScript to be rendered...

4.8CVSS5.1AI score0.00539EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/02/28 3:29 p.m.23 views

CVE-2018-7469

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...

4.8CVSS5AI score0.00539EPSS
SaveExploits1References1
NVD
NVD
added 2018/02/28 7:29 a.m.25 views

CVE-2018-7477

SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parentmodule/parentlogin.php...

9.8CVSS9.9AI score0.02703EPSS
SaveExploits5References1
Cvelist
Cvelist
added 2018/02/28 7:0 a.m.31 views

CVE-2018-7477

SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parentmodule/parentlogin.php...

9.9AI score0.02703EPSS
SaveExploits5References1
CVE
CVE
added 2018/02/28 7:0 a.m.55 views

CVE-2018-7477

The CVE-2018-7477 entry describes a SQL injection in PHP Scripts Mall School Management Script 3.0.4 that allows authentication bypass via the login page at parents/Parent_module/parent_login.php. Multiple connected sources corroborate a vulnerability in the Username/Password fields enabling admi...

9.8CVSS9.8AI score0.02703EPSS
SaveExploits5References1Affected Software1
zdt
zdt
added 2018/02/28 12:0 a.m.57 views

School Management Script 3.0.4 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4. Exploit Author: Samiran Santra Vendor Homepage: https://www.phpscriptsmall.com Software Link: https://www.phpscriptsmall.com/product/school-management-syst...

7.5CVSS9.2AI score0.02703EPSS
SaveExploits5
CNVD
CNVD
added 2018/02/27 12:0 a.m.4 views

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script is a set of online group buying deal scripts from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script version 3.0.2. A remote attacker can exploit this...

5.4CVSS6.3AI score0.00554EPSS
SaveExploits5References1
exploitpack
exploitpack
added 2018/02/27 12:0 a.m.56 views

School Management Script 3.0.4 - Authentication Bypass

School Management Script 3.0.4 - Authentication Bypass Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4. Date: 26/02/2018 Exploit Author: Samiran Santra Vendor Homepage: https://www.phpscriptsmall.com Software Link:...

7.5CVSS0.5AI score0.02703EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2018/02/27 12:0 a.m.33 views

School Management Script 3.0.4 SQL Injection

Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4. Date: 26/02/2018 Exploit Author: Samiran Santra Vendor Homepage: https://www.phpscriptsmall.com Software Link: https://www.phpscriptsmall.com/product/school-management-system Version: v3.0.4 Tested on: Windows...

9.2AI score0.02703EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/02/27 12:0 a.m.40 views

School Management Script 3.0.4 - Authentication Bypass

Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4. Date: 26/02/2018 Exploit Author: Samiran Santra Vendor Homepage: https://www.phpscriptsmall.com Software Link: https://www.phpscriptsmall.com/product/school-management-system Version: v3.0.4 Tested on: Windows...

9.8CVSS8.4AI score0.02703EPSS
SaveExploits5
CNVD
CNVD
added 2018/02/26 12:0 a.m.5 views

PHP Scripts Mall Multi Language Olx Clone Script Cross Site Scripting Vulnerability

PHP Scripts Mall Multi Language Olx Clone Script is a set of PHP based scripts for multilingual information publishing websites from PHP Scripts Mall, India. A cross-site scripting vulnerability exists in PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6. A remote attacker can exploi...

6.1CVSS6AI score0.02511EPSS
SaveExploits4References1
CNVD
CNVD
added 2018/02/26 12:0 a.m.5 views

PHP Scripts Mall Facebook Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Facebook Clone Script is a set of PHP based social networking site scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Facebook Clone Script. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

5.4CVSS6.3AI score0.00554EPSS
SaveExploits4References1
CNVD
CNVD
added 2018/02/26 12:0 a.m.7 views

PHP Scripts Mall Bitcoin MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Bitcoin MLM Software is a PHP-based bitcoin management software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Bitcoin MLM Software version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

5.4CVSS6.2AI score0.00668EPSS
SaveExploits4References1
CNVD
CNVD
added 2018/02/26 12:0 a.m.5 views

PHP Scripts Mall Hot Scripts Clone Script Classified Cross-Site Scripting Vulnerability

PHP Scripts Mall Hot Scripts Clone Script Classified is a set of PHP based information publishing website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the review section of PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1. A remote attacker can...

5.4CVSS6AI score0.00558EPSS
SaveExploits1References1
NVD
NVD
added 2018/02/23 6:29 p.m.21 views

CVE-2018-6859

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...

9.8CVSS10AI score0.01739EPSS
SaveExploits4References2
Cvelist
Cvelist
added 2018/02/23 6:0 p.m.21 views

CVE-2018-6859

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter...

10AI score0.01739EPSS
SaveExploits4References2
CVE
CVE
added 2018/02/23 6:0 p.m.59 views

CVE-2018-6859

CVE-2018-6859 affects the PHP Scripts Mall Schools Alert Management Script (version 2.0.2). A SQL Injection in the Login parameter enables a remote attacker to bypass authentication, effectively gaining access without valid credentials. Several connected sources corroborate an authentication bypa...

9.8CVSS9.9AI score0.01739EPSS
SaveExploits4References2Affected Software1
Prion
Prion
added 2018/02/23 1:29 p.m.22 views

Cross site scripting

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

3.5CVSS5.3AI score0.00674EPSS
SaveExploits4References1Affected Software1
Rows per page
Query Builder