PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability (CNVD-2018-00494)

Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the admin/generalsettingupd.php...

Code injection

PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...

PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

Gratipay: text injection in website title

Hi, I would like to report an incomplete fix of 115284 , text can inject in website title , see attached files. Regards...