1351 matches found
CVE-2018-6861
The CVE-2018-6861 entry describes a Cross Site Scripting (XSS) vulnerability in PHP Scripts Mall Lawyer Search Script 1.0.2, exploitable via a profile update parameter. Multiple sources (NVD, CNVD, CVE listings) corroborate that user-supplied input in profile fields is not properly sanitized, all...
CVE-2018-6864
CVE-2018-6864 concerns a stored Cross-Site Scripting (XSS) vulnerability in the PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2. The issue is triggered via a user profile update parameter, where input is insufficiently sanitized, allowing arbitrary web-script/HTML execution in a vict...
CVE-2018-6860
CVE-2018-6860 affects the PHP Scripts Mall Schools Alert Management Script 2.0.2. Public sources confirm an arbitrary file upload vulnerability in the profile picture upload flow that can lead to remote code execution. Exploitation samples exist (Exploit-DB PoC and multiple mirrors) showing how a...
CVE-2018-6860: Unrestricted Upload of File with Dangerous Type
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture...
CVE-2018-6858: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6862: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 via a profile field...
CVE-2018-6864: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile update parameter...
CVE-2018-6845: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6861: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter...
CVE-2018-6863: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter...
CVE-2018-6878
Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...
Cross site scripting
Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...
CVE-2018-6878
Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...
CVE-2018-6878
Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...
CVE-2018-6878
The connected sources confirm CVE-2018-6878 affects PHP Scripts Mall Hot Scripts Clone Script Classified 3.1, with a Cross Site Scripting (XSS) vulnerability in the review section exploitable via the title or description fields. The documents do not specify whether the issue is stored or reflecte...
PHP Scripts Mall Naukri Clone Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Naukri Clone Script is an online recruitment system script based on PHP and MySQL platform by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Naukri Clone Script version 3.0.3. The vulnerability can be exploited by a remote attacker to inje...
CVE-2018-6878: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...
PHP Scripts Mall Doctor Search Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script o...