CVE-2023-3560

CVE-2023-3560 relates to a cross-site scripting vulnerability in GZ Scripts Ticket Booking Script 1.8, specifically affecting the /load.php functionality. The root cause is improper handling of input parameters (first_name/second_name/phone/address_1/country), enabling remote attacker-controlled ...

CVE-2023-3559

CVE-2023-3559 affects GZ Scripts PHP GZ Appointment Scheduling Script 1.8. The vulnerability is in the /load.php endpoint, where manipulating parameters first_name, second_name, phone, address_1, or country enables cross-site scripting. Attacks can be launched remotely. Public references (VDB-233...

CVE-2023-3559 GZ Scripts PHP GZ Appointment Scheduling Script load.php cross site scripting

A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability is an unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting...

CVE-2023-3558

CVE-2023-3558 affects GZ Scripts Event Booking Calendar version 1.8, specifically the /load.php file. The vulnerability arises from manipulation of parameters (first_name, second_name, phone, address_1, country) leading to cross-site scripting. The issue is described as exploitable remotely in mu...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3557

CVE-2023-3557 affects GZ Scripts Property Listing Script 1.0. A cross-site scripting vulnerability arises from manipulating the /preview.php argument page/layout/sort_by, with remote exploitation potential. Multiple sources confirm this issue but do not provide a fix in the initial record. Remedi...

CVE-2023-3556 GZ Scripts Car Listing Script PHP preview.php cross site scripting

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /preview.php. The manipulation of the argument page/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-233350 i...

CVE-2023-3556

GZ Scripts Car Listing Script PHP 1.8 is affected, with a cross-site scripting vulnerability in /preview.php triggered by manipulating the page/sort_by parameter. The issue allows remote attack and is documented across multiple sources (CVE-2023-3556). Root cause is unknown in publicly provided d...

CVE-2023-3555 GZ Scripts PHP Vacation Rental Script preview.php cross site scripting

A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /preview.php. The manipulation of the argument page/layout/sortby/propertyid leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3555

The CVE-2023-3555 entry concerns GZ Scripts PHP Vacation Rental Script 1.8, with a cross-site scripting (XSS) flaw in an unknown area of /preview.php. The vulnerability is triggered by manipulating the arguments page, layout, sort_by, and property_id, allowing a remote attacker to exploit the iss...

CVE-2023-3554 GZ Scripts GZ Forum Script preview.php cross site scripting

A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /preview.php. The manipulation of the argument catid/topicid/topic/topicmessage/freename leads to cross site scripting. The attack may be...

CVE-2023-3554

CVE-2023-3554 affects GZ Scripts GZ Forum Script 1.8. The vulnerability is in /preview.php where manipulating parameters such as catid, topicid, topic, topic message, or free name enables cross-site scripting. The issue can be exploited remotely. Connected sources corroborate the same description...

PT-2023-25224 · Gz Scripts · Gz Forum Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts GZ Forum Script version 1.8 Description: A vulnerability was found in the file /preview.php, where the manipulation of the arguments catid, topicid, topic, topic message, or free name leads to cross site scripting. The attack may b...

PT-2023-25232 · Unknown · Gz Scripts Php Crm Platform

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP CRM Platform version 1.8 Description: A vulnerability has been found in the GZ Scripts PHP CRM Platform, classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the action argument...

PT-2023-25225 · Unknown · Gz Scripts Php Vacation Rental Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP Vacation Rental Script version 1.8 Description: A problematic issue has been found, affecting an unknown part of the file /preview.php. The manipulation of the page, layout, sort by, and property id arguments leads to cross-sit...

PT-2023-25230 · Unknown · Gz Scripts Ticket Booking Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts Ticket Booking Script version 1.8 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /load.php. The manipulation of the arguments first name, second name, phone, addres...

PT-2023-25233 · Gz Scripts · Gz E Learning Platform

Name of the Vulnerable Software and Affected Versions: GZ Scripts GZ E Learning Platform version 1.8 Description: A problem was found in the processing of the component URL Parameter Handler, which can lead to cross site scripting. The issue can be exploited remotely. Recommendations: For GZ...

CVE-2023-3544

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

CVE-2023-3543

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/firstname/secondname/address1/country leads to...