Input validation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

Design/Logic Flaw

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

PHP Scripts Mall Image Sharing Script HTML Injection Vulnerability

PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. PHP Scripts Mall Image Sharing Script 1.3.4 suffers from an HTML injection vulnerability. The vulnerability can be exploited to achieve HTML...

PHP Scripts Mall Classified Ads Script Reflective HTML Injection Vulnerability

PHP Scripts Mall Classified Ads Script is a classified ads script. PHP Scripts Mall Classified Ads Script 3.2.2 suffers from a reflected HTML injection vulnerability. An attacker can exploit this vulnerability to perform HTML injection via a search form...

CVE-2019-7438

CVE-2019-7438 affects JioFi 4G M2S 1.0.2 devices; vulnerability in cgi-bin/qcmap_web_cgi allows XSS/HTML injection via the mask POST parameter, with exploit examples and public writeups (exploit-db, PacketStorm, etc.). Impact described as client-side script injection; CVSS metrics in sources show...

CVE-2019-7438

cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...

CVE-2019-7435

CVE-2019-7435 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2, which shows a reflected HTML injection vulnerability via the Search Form. The root cause is reflected HTML injection in the search functionality, enabling an attacker to manipulate HTML output. The CVSS details indicat...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

CVE-2019-7430

The CVE-2019-7430 entry documents a vulnerability in PHP Scripts Mall Image Sharing Script 1.3.4, described as an HTML injection via the Search Bar. The affected component is the image sharing script’s Search Bar handling; root cause details are not expanded beyond the HTML injection claim in the...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

CVE-2018-20645

Summary of CVE-2018-20645 : The vulnerability affects PHP Scripts Mall Basic B2B Script 2.0.9, with HTML injection possible through the First Name or Last Name fields. The initial disclosure lists a CVSS base score of 5.4 (Medium) on CVSS 3.0 and 3.5 (Low) on CVSS 2.0, indicating a moderate impac...

CVE-2018-20645

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20639

CVE-2018-20639 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, with an HTML injection vulnerability exploitable via the Search Bar. The connected sources consistently describe HTML injection in this product edition and do not provide specific exploit code, versions beyond 3.0.1, or...

CVE-2018-20639

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20636

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20636

CVE-2018-20636 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability is HTML injection via the First Name field. Public references confirm the product/version and injection class; CVSS v3.0 base score is 5.4 (MEDIUM) with network access and user interaction requ...

CVE-2018-20627

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

PT-2019-10135

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns HTML injection via the Search Bar, which could potentially allow attackers to inject malicious HTML code. Recommendations: For PHP Scripts Mall...

CVE-2019-7438: Improper Neutralization of Input During Web Page Generation

cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...

PT-2019-10142

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...