1488 matches found
Cross site scripting
PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...
Cross site scripting
PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field...
CVE-2018-6795
PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field...
CVE-2018-6796
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
CVE-2018-6655
The CVE-2018-6655 entry affects PHP Scripts Mall Doctor Search Script 1.0.2, describing a Stored Cross-Site Scripting vulnerability via an arbitrary profile field. Public artifacts (exploit-db, 0day, CNVD/NVD mirrors) corroborate that an attacker could inject arbitrary script/HTML through profile...
CVE-2018-6795
CVE-2018-6795 affects PHP Scripts Mall Naukri Clone Script 3.0.3. The connected documents describe a Stored XSS vulnerability reachable via every profile input field, indicating user-supplied data entering profile fields can be echoed without proper sanitization. This is evidenced by multiple cro...
CVE-2018-6655
PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...
CVE-2018-6795
PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field...
PHP Scripts Mall Doctor Search Script 1.0.2 Cross Site Scripting
Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/doctor-search-script/...
PT-2018-17697
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Doctor Search Script version 1.0.2 Description The issue is related to Stored XSS, which occurs via an arbitrary profile field. This allows for potential malicious script execution. Recommendations For PHP Scripts Mall Doctor...
CVE-2018-6796: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
PT-2018-17750
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of user...
PT-2018-17749
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri Clone Script version 3.0.3 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of a user's profile,...
Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...
Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01239)
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/eventadd.ph...
Muslim Matrimonial Script Cross-Site Scripting Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the...
Cross site request forgery (csrf)
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...
Design/Logic Flaw
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...