goldcoders.com XSS vulnerability

Open Bug Bounty ID: OBB-427835 Description| Value ---|--- Affected Website:| goldcoders.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

GoldCoders Admin account change any information Vulnerability

In the most popular HYIP investment program script from the goldsoders completely absent protection CSRF vulnerability. Usage Info Successful exploitation of this vulnerability requires to make a copy of the source code in any page settings from the admin panel and replace the fields, on the date...

HYIP Manager Pro Script >> Remote file Include

vendor : www.goldcoders.com BY : www.hackerz.ir userz,ali filez ---- inc/libs/Smarty.class.php inc/libs/SmartyCompiler.class.php inc/libs/core/core.displaydebugconsole.php inc/libs/core/core.loadplugins.php inc/libs/core/core.loadresourceplugin.php inc/libs/core/core.processcachedinserts.php...