691 matches found
CVE-2018-6902
Affected product: PHP Scripts Mall Image Sharing Script 1.3.3. Vulnerability: Cross-Site Scripting (XSS) via the Full Name field in an Edit Profile action. Root cause/details are not fully described in the provided documents beyond the XSS label. Impact ranges from low to medium according to CVSS...
CVE-2018-6934
The CVE-2018-6934 entry describes a CSRF vulnerability in the PHP Scripts Mall Online Tutoring Script 2.0.3, specifically affecting the student/personal-info component. The connected documents corroborate the issue across NVD and CVE listings, though they do not provide additional details on the ...
CVE-2018-9857
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...
Design/Logic Flaw
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...
CVE-2018-9857
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...
CVE-2018-9857
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...
CVE-2018-9857
CVE-2018-9857 concerns PHP Scripts Mall Match Clone Script 1.0.4. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the searchbyid.php “View Search By Id” screen in the product’s search field. Attackers can inject arbitrary scripts, as demonstrated by PoCs in the linked exploit r...
PHP Scripts Mall Match Clone Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Match Clone Script is a matrimonial dating software from PHP Scripts Mall India. The program features live chat, privacy protection and member registration. A cross-site scripting vulnerability exists in PHP Scripts Mall Match Clone Script version 1.0.4. A remote attacker can...
Design/Logic Flaw
PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...
CVE-2018-9328
PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...
CVE-2018-9328
CVE-2018-9328 affects PHP Scripts Mall Redbus Clone Script 3.0.6, with reflected XSS through the ter_from or tag parameter to results.php. The root cause is an input handling flaw that allows arbitrary HTML/JS injection via these parameters. No exploits or patch details are provided in the connec...
CVE-2018-7650
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...
Design/Logic Flaw
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...
CVE-2018-7650
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...
CVE-2018-7650
Summary: CVE-2018-7650 corresponds to a stored XSS in PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, specifically in the Add New section for a Management User. The issue arises because the input in the name parameter is not sanitized, allowing injected JavaScript to be rendered...
CVE-2018-7469
PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...
CVE-2018-7469
The CVE-2018-7469 entry concerns PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9. A cross-site scripting (XSS) vulnerability exists via the p_name field (Edit Category Name) submitted to admin/categories_industry.php (Categories – Industry Type). The connected CNVD/NVD records confirm a sto...
CVE-2018-7477
SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parentmodule/parentlogin.php...