7 matches found
CVE-2018-15185
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
PT-2018-12932
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue allows remote attackers to cause a denial of service, specifically a page update outage, by injecting crafted PHP and JavaScript code into the Current...
CVE-2018-15185: Improper Input Validation
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
PT-2018-12931
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue is related to Stored XSS via the USERNAME field. Recommendations For version 3.0.4, update to a newer version that contains a fix for this issue...
CVE-2018-15184: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
CVE-2018-11514: Unrestricted Upload of File with Dangerous Type
PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...
PT-2018-17749
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri Clone Script version 3.0.3 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of a user's profile,...