Got.my Link Exchange 1.8.9 SQL Injection

Vendor: http://www.got.my http://www.got.my/LINK-EXCHANGE-Script Vulnerable Version: 1.8.9 Vulnerability Type: SQL Injection Risk level: High Credit: Hector.x90 Vulnerability Details: The vulnerability exists due to failure in the "/admin/categories.php" script to properly sanitize user-supplied...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

GoT.MY (Multiple Products) - 'theme_dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-base...