Lucene search
+L

1197 matches found

CNVD
CNVD
added 2018/02/26 12:00 a.m.10 views

PHP Scripts Mall Hot Scripts Clone Script Classified Cross-Site Scripting Vulnerability

PHP Scripts Mall Hot Scripts Clone Script Classified is a set of PHP based information publishing website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the review section of PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1. A remote attacker can...

5.4CVSS6AI score0.00558EPSS
SaveExploits1References1
Prion
Prion
added 2018/02/09 6:29 p.m.32 views

Cross site scripting

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

3.5CVSS5AI score0.00558EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/02/09 6:29 p.m.34 views

CVE-2018-6878

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

5.4CVSS5AI score0.00558EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/02/09 6:00 p.m.43 views

CVE-2018-6878

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

5AI score0.00558EPSS
SaveExploits1References1
CVE
CVE
added 2018/02/09 6:00 p.m.59 views

CVE-2018-6878

The connected sources confirm CVE-2018-6878 affects PHP Scripts Mall Hot Scripts Clone Script Classified 3.1, with a Cross Site Scripting (XSS) vulnerability in the review section exploitable via the title or description fields. The documents do not specify whether the issue is stored or reflecte...

5.4CVSS5AI score0.00558EPSS
SaveExploits1References1Affected Software1
Exploit DB
Exploit DB
added 2018/02/07 12:00 a.m.31 views

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: Hot Scripts Clone : Script Classified - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vend...

6.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/01/28 12:00 a.m.69 views

Hot Scripts Clone - 'subctid' SQL Injection

Exploit Title: Hot Scripts Clone Script 1.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/M72g4502563/php-scripts/hot-scripts-clone-:-script-classified Version: 1.0 Category: Webapps Tested on:...

9.8CVSS8.4AI score0.03656EPSS
SaveExploits3
CNVD
CNVD
added 2017/12/15 12:00 a.m.9 views

PHP Scripts Mall Hot Scripts Clone SQL Injection Vulnerability

PHP Scripts Mall Hot Scripts Clone is a set of PHP based classifieds posting scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Hot Scripts Clone version 3.1. A remote attacker can exploit the vulnerability by sending the 'prid' or 'mctid' parameter to...

9.8CVSS8.1AI score0.03656EPSS
SaveExploits3References1
NVD
NVD
added 2017/12/13 9:29 a.m.26 views

CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

9.8CVSS10AI score0.03656EPSS
SaveExploits3References3
Prion
Prion
added 2017/12/13 9:29 a.m.20 views

Sql injection

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

7.5CVSS9.9AI score0.03656EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2017/12/13 9:00 a.m.34 views

CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

10AI score0.03656EPSS
SaveExploits3References3
CVE
CVE
added 2017/12/13 9:00 a.m.47 views

CVE-2017-17612

The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...

9.8CVSS9.9AI score0.03656EPSS
SaveExploits3References3Affected Software1
zdt
zdt
added 2017/12/11 12:00 a.m.23 views

Hot Scripts Clone 3.1 - subctid / mctid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hot Scripts Clone 3.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/hot-scripts-clone-script-classified/ Version: 3.1 Category:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2017/12/11 12:00 a.m.17 views

Hot Scripts Clone 3.1 - subctid mctid SQL Injection

Hot Scripts Clone 3.1 - subctid mctid SQL Injection Exploit Title: Hot Scripts Clone 3.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/hot-scripts-clone-script-classified/ Version: 3.1 Category:...

SaveExploits0
CNVD
CNVD
added 2017/12/10 12:00 a.m.6 views

HOT Man Android App Has Information Leakage Vulnerability

HOT Man Android APP is a mobile magazine software. There is an information leakage vulnerability in HOT Man Android APP. After registering and logging in to the system, an attacker can obtain sensitive information such as other users' UIDs, names, and cell phone numbers by clicking on "My Avatar"...

6.6AI score
SaveExploits0
NVD
NVD
added 2017/11/27 10:29 p.m.19 views

CVE-2015-7267

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

4.2CVSS4.5AI score0.0033EPSS
SaveExploits0References2
Prion
Prion
added 2017/11/27 10:29 p.m.22 views

Hardcoded credentials

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

1.9CVSS7.1AI score0.0033EPSS
SaveExploits0References2
Prion
Prion
added 2017/11/27 10:29 p.m.22 views

Hardcoded credentials

Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive SED protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and...

1.9CVSS7.1AI score0.0033EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/11/27 10:00 p.m.29 views

CVE-2015-7269

Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive SED protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and...

4.4AI score0.0033EPSS
SaveExploits0References2
CVE
CVE
added 2017/11/27 10:00 p.m.48 views

CVE-2015-7269

Summary: The CVE-2015-7269 vulnerability affects Seagate ST500LT015 hard drives in Lenovo ThinkPad W541 laptops running BIOS 2.21, where an attacker in close physical proximity can bypass the drive’s self-encrypting drive (SED) protection by a “Hot Unplug Attack" using a second SATA connector and...

4.2CVSS4.5AI score0.0033EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder