PT-2018-19079

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Match Clone Script version 1.0.4 Description The issue concerns a problem where an attacker can inject malicious code via the search field. This is related to the "View Search By Id" screen, accessible through the searchbyid.p...

CVE-2018-9857: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php aka the "View Search By Id" screen...

CVE-2018-9328

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

CVE-2018-9328

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

Design/Logic Flaw

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

CVE-2018-9328

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

CVE-2018-9328

CVE-2018-9328 affects PHP Scripts Mall Redbus Clone Script 3.0.6, with reflected XSS through the ter_from or tag parameter to results.php. The root cause is an input handling flaw that allows arbitrary HTML/JS injection via these parameters. No exploits or patch details are provided in the connec...

PT-2018-18985

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Redbus Clone Script version 3.0.6 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the ter from or tag parameter in the "results.php" endpoint...

CVE-2018-9328: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

53R3N17Y - Python Based Script For Information Gathering

Python based script for Information Gathering. Operating Systems Tested OSX El Capitan 10.11 Ubuntu 16.04 Backbox 5 Install MacOSX as root git clone https://github.com/abaykan/53R3N17Y.git /usr/local/share/serenity echo 'alias serenity="/usr/local/share/serenity && ./serenity"' /.zshrc cd...

Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards

By Uzair Amir It is just another day with just another ATM malware This is a post from HackRead.com Read the original post: Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards...

Design/Logic Flaw

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...

CVE-2018-7650

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...

CVE-2018-7650

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript...

CVE-2018-7650

Summary: CVE-2018-7650 corresponds to a stored XSS in PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, specifically in the Add New section for a Management User. The issue arises because the input in the name parameter is not sanitized, allowing injected JavaScript to be rendered...

AutoSploit v2.0 - Automated Mass Exploiter

As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye. But options to add your custom targets and host lists have been included as well. The available Metasploit modules have been select...

Joomla! Pinterest Clone Social Pinboard,2.0,SQL Injection

Joomla! Pinterest Clone Social Pinboard from apptha.com, 2.0, multiple SQL Injection vulnerabilities...

PHP Scripts Mall Alibaba Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Alibaba Clone Script is an e-commerce system from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Alibaba Clone Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script is a set of online group buying deal scripts from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script version 3.0.2. A remote attacker can exploit this...

PHP Scripts Mall Multi Language Olx Clone Script Cross Site Scripting Vulnerability

PHP Scripts Mall Multi Language Olx Clone Script is a set of PHP based scripts for multilingual information publishing websites from PHP Scripts Mall, India. A cross-site scripting vulnerability exists in PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6. A remote attacker can exploi...