CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

CVE-2018-6867 affects PHP Scripts Mall Alibaba Clone Script 1.0.2. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via the profile parameter, as described in multiple sources and evidenced by PoC/exploit references (e.g., exploit-db, 0day.today, Packet Storm). Public writeups ...

CVE-2018-6868

CVE-2018-6868 affects PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script 3.0.2. The issue is a Cross-Site Scripting vulnerability exposed via a User Profile Field parameter in the web app. PoC and multiple public exploits indicate a stored XSS vector, demonstrated in PoC examples (e.g., sc...

CVE-2018-6868

Cross Site Scripting XSS exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter...

Alibaba Clone Script 1.0.2 Cross Site Scripting

Exploit Title: Alibaba Clone Script 1.0.2 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Version...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting. CVE-2018-6867. Webapps exploit for PHP platform Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category...

Groupon Clone Script 3.0.2 - Cross-Site Scripting

Groupon Clone Script 3.0.2 - Cross-Site Scripting. CVE-2018-6868. Webapps exploit for PHP platform Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Groupon Clone Script 3.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

Design/Logic Flaw

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

CVE-2018-6858

CVE-2018-6858 affects the PHP Scripts Mall Facebook Clone Script (notably version 1.0.5). The connected sources describe a cross-site scripting (XSS) vulnerability in the Facebook Clone Script, enabling injection of arbitrary web script or HTML via user comments, i.e., a stored XSS scenario demon...

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

CVE-2018-6845

The CVE-2018-6845 entry concerns PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 and a Cross-Site Scripting (XSS) vulnerability exposed via the Leave Comment field. The CNVD/NVD records confirm a stored/reflected XSS pathway where user-supplied input in comments can inject arbitrary script...