Lucene search
K

3098 matches found

OSV
OSV
added 2018/02/14 3:29 p.m.2 views

UBUNTU-CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.3AI score0.00284EPSS
Exploits1References3
OSV
OSV
added 2018/02/14 3:29 p.m.2 views

ALPINE-CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.00284EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/02/14 3:0 p.m.19 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.7AI score0.00284EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2018/02/14 3:0 p.m.31 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.8AI score0.00284EPSS
Exploits1
Debian CVE
Debian CVE
added 2018/02/14 3:0 p.m.15 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.00284EPSS
Exploits1
NVD
NVD
added 2018/02/12 3:29 a.m.12 views

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

5.4CVSS5.4AI score0.00181EPSS
Exploits4References1
Prion
Prion
added 2018/02/12 3:29 a.m.19 views

Design/Logic Flaw

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

4.3CVSS6AI score0.00198EPSS
Exploits3References1Affected Software1
OSV
OSV
added 2018/02/12 3:29 a.m.3 views

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

6.1CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2018/02/12 3:29 a.m.1 views

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

5.4CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2018/02/12 3:29 a.m.14 views

Cross site scripting

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

3.5CVSS5.3AI score0.00181EPSS
Exploits4References1Affected Software1
NVD
NVD
added 2018/02/12 3:29 a.m.10 views

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

6.1CVSS6.1AI score0.00198EPSS
Exploits3References1
Cvelist
Cvelist
added 2018/02/12 3:0 a.m.12 views

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

5.4AI score0.00181EPSS
Exploits4References1
CVE
CVE
added 2018/02/12 3:0 a.m.37 views

CVE-2018-6858

CVE-2018-6858 affects the PHP Scripts Mall Facebook Clone Script (notably version 1.0.5). The connected sources describe a cross-site scripting (XSS) vulnerability in the Facebook Clone Script, enabling injection of arbitrary web script or HTML via user comments, i.e., a stored XSS scenario demon...

5.4CVSS5.3AI score0.00181EPSS
Exploits4References1Affected Software1
Cvelist
Cvelist
added 2018/02/12 3:0 a.m.9 views

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

6.1AI score0.00198EPSS
Exploits3References1
CVE
CVE
added 2018/02/12 3:0 a.m.39 views

CVE-2018-6845

The CVE-2018-6845 entry concerns PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 and a Cross-Site Scripting (XSS) vulnerability exposed via the Leave Comment field. The CNVD/NVD records confirm a stored/reflected XSS pathway where user-supplied input in comments can inject arbitrary script...

6.1CVSS6AI score0.00198EPSS
Exploits3References1Affected Software1
0day.today
0day.today
added 2018/02/12 12:0 a.m.16 views

Paypal Clone Script 1.0.9 - id / acctype SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2018/02/11 12:0 a.m.15 views

Paypal Clone Script 1.0.9 - id acctype SQL Injection

Paypal Clone Script 1.0.9 - id acctype SQL Injection Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2018/02/11 12:0 a.m.55 views

Paypal Clone Script 1.0.9 - 'id' / 'acctype' SQL Injection

Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/ Version: 1.0.9 Category: Webapps CVE: N/...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/02/11 12:0 a.m.31 views

Paypal / Money Transfer Clone Script 1.0.9 SQL Injection

Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/ Version: 1.0.9 Category: Webapps CVE: N/...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2018/02/10 12:0 a.m.65 views

Facebook Clone Script 1.0.5 - Cross-Site Scripting

Facebook Clone Script 1.0.5 - Cross-Site Scripting. CVE-2018-6858. Webapps exploit for PHP platform Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/...

5.4CVSS5.9AI score0.00181EPSS
Exploits4
Rows per page
Query Builder