1488 matches found
CVE-2018-6900
The CVE-2018-6900 entry concerns PHP Scripts Mall Website Broker Script 3.0.6, with a reflected/stored XSS via the Last Name field on the My Profile page. The publicly documented content across sources confirms the vulnerable component (the broker script), the input vector (Last Name on My Profil...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6870
Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature...
CVE-2018-6902: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6935: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
PT-2018-17810
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.3 Description The issue concerns a problem where an attacker can inject malicious code via the Full Name field in an Edit Profile action, potentially leading to unauthorized actions on the...
PT-2018-17811
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1 Description The issue concerns the validation of an e-mail address, which is enforced on the client side. This allows remote attackers to modify a registered e-mail address by...
PT-2018-17829
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Student Profile Management System Script version 2.0.6 Description The issue concerns a problem where an attacker can inject malicious code into the Name field, which is then executed when the list student.php page is accessed...
CVE-2018-6900: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page...
PT-2018-17809
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Broker Script version 3.0.6 Description The issue concerns a problem where an attacker can inject malicious code via the Last Name field on the My Profile page, potentially leading to unauthorized actions on the websit...
PT-2018-17799
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.3 Description The issue allows remote attackers to modify a registered e-mail address by removing the validation code, as the validation of an e-mail address is enforced on the client side...
PT-2018-17828
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Tutoring Script version 2.0.3 Description The issue exists in the student/personal-info endpoint, where a CSRF flaw is present. Recommendations For PHP Scripts Mall Online Tutoring Script version 2.0.3, consider...
PT-2018-17793
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.3 Description A reflected XSS issue exists in the Listings Search feature, allowing for potential exploitation. Recommendations For version 2.0.3, update the Listings Search feature to properl...
CVE-2018-6934: Cross-Site Request Forgery (CSRF)
CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3...
CVE-2018-6879: Improper Input Validation
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
CVE-2018-6903: Improper Input Validation
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
CVE-2018-6904: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action...
CVE-2018-6870: Improper Neutralization of Input During Web Page Generation
Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature...
PT-2018-17812
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the User Name field in an Edit Profile action. This allows for potential malicious script injection...
