2 matches found
CVE-2017-17930: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
8.8CVSS7.7AI score0.00505EPSS
SaveExploits1References2
CVE-2017-17925: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
4.8CVSS5.6AI score0.0054EPSS
SaveExploits1References2
20