EUVD-2019-18452

Malware in sbrugna...

PHP Scripts Mall PHP Appointment Booking Script Cross-Site Scripting Vulnerability

PHP Scripts Mall PHP Appointment Booking Script is a web based online appointment booking system by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the user profile page in PHP Scripts Mall PHP Appointment Booking Script version 3.0.3, which can be exploited by attackers to...

CVE-2019-9066

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

PT-2019-19349

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Appointment Booking Script version 3.0.3 Description The issue allows HTML injection in a user profile, which could potentially be used to inject malicious code. Recommendations For PHP Scripts Mall PHP Appointment Booking...

CVE-2019-9066: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

PHP Appointment Booking Script - Authentication Bypass

======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username and password to admin' or 1=1 -- -...