1908 matches found
Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...
SMS Bombing Vulnerability in Air China's Android Client
Air China Android client is an airplane flight inquiry service software. An SMS bombing vulnerability exists in the Air China Android client - Zhiyin Mall at the order submission. An attacker is allowed to replay this interface for SMS bombing, which constitutes system resource consumption...
File inclusion vulnerability in the get_url_contents() method of the DSmall Multi-User Mall system
DSmall is a multi-user mall system source code developed with thinkPHP as the framework. DSmall multi-user mall system geturlcontents method file inclusion vulnerability. Allow attackers to exploit the vulnerability to remotely execute arbitrary code...
PHPSHE open source mall system onotify_url.php page exists external entity injection vulnerability
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system onotifyurl.php page...
SQL Injection Vulnerability in PHPSHE Online Shopping Mall System
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. The user.php page in version v1.6 of the PHPSHE online shopping mall system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain...
Muslim Matrimonial Script SQL Injection Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script has a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the view-profile.php memid parameter...
Muslim Matrimonial Script Cross-Site Request Forgery Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script suffers from a cross-site request forgery vulnerability. The vulnerability can be exploited to conduct cross-site request forgery attacks via...
Muslim Matrimonial Script Cross-Site Scripting Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the...
Muslim Matrimonial Script Arbitrary File Upload Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script has an arbitrary file upload vulnerability. The vulnerability can be exploited to upload arbitrary files via admin/mydetailsedit.php...
Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01239)
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/eventadd.ph...
CVE-2017-17985
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...
Design/Logic Flaw
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17987
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...
CVE-2017-17986
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...
CVE-2017-17981
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17982
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...
CVE-2017-17985
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...
CVE-2017-17988
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...