4174 matches found
CVE-2018-7032
webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...
CVE-2018-7032: Improper Neutralization of Special Elements in Output Used by a Downstream Component
webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...
PT-2018-17860
Name of the Vulnerable Software and Affected Versions myrepos versions through 1.20171231 Description The issue allows a malicious website operator or a Man-in-the-Middle MitM attacker to execute arbitrary code. This can be achieved by taking advantage of the fact that webcheckout in myrepos does...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
Design/Logic Flaw
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
Cross site scripting
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6858
CVE-2018-6858 affects the PHP Scripts Mall Facebook Clone Script (notably version 1.0.5). The connected sources describe a cross-site scripting (XSS) vulnerability in the Facebook Clone Script, enabling injection of arbitrary web script or HTML via user comments, i.e., a stored XSS scenario demon...
CVE-2018-6845
The CVE-2018-6845 entry concerns PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 and a Cross-Site Scripting (XSS) vulnerability exposed via the Leave Comment field. The CNVD/NVD records confirm a stored/reflected XSS pathway where user-supplied input in comments can inject arbitrary script...
PT-2018-17783
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Facebook Clone Script affected versions not specified Description The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a websit...
PT-2018-17773
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6 Description The issue concerns a problem where an attacker can inject malicious code via the Leave Comment field, potentially leading to security breaches. Recommendations For PHP...
CVE-2018-6845: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6858: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
Paypal Clone Script 1.0.9 - id / acctype SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/...
Paypal / Money Transfer Clone Script 1.0.9 SQL Injection
Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/ Version: 1.0.9 Category: Webapps CVE: N/...
Paypal Clone Script 1.0.9 - 'id' / 'acctype' SQL Injection
Exploit Title: Paypal / Money Transfer Clone Script 1.0.9 - SQL Injection Dork: N/A Date: 2018-02-10 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/paypal-money-transfer-clone/ Version: 1.0.9 Category: Webapps CVE: N/...