CVE-2018-15190: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

PT-2018-12934

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a CSRF vulnerability. It affects the "edit-profile.php" endpoint. Recommendations For version 4.0.9, consider implementing proper CSRF protection...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15183

PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...

CVE-2018-15184

CVE-2018-15184 affects PHP Scripts Mall Naukri/Shine/Jobsite Clone Script, version 3.0.4. The vulnerability is a stored cross-site scripting (XSS) issue in the USERNAME field, as described in multiple sources (notably the CVE entry and CNVD/NVD records). The root cause is input handling that allo...

CVE-2018-15182

CVE-2018-15182 affects PHP Scripts Mall Car Rental Script 2.0.8, with Cross‑Site Scripting via the FirstName and LastName fields. The connected documents corroborate an HTML/JS injection vulnerability in this script, but the provided materials do not specify the exact root cause, affected code lo...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15183: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...

PT-2018-12930

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script version 2.0.6 Description The issue concerns a Stored XSS flaw that can be triggered via the Full Name and Title fields. Recommendations For version 2.0.6, update to a newer...

PT-2018-12931

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue is related to Stored XSS via the USERNAME field. Recommendations For version 3.0.4, update to a newer version that contains a fix for this issue...

CVE-2018-15184: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

PT-2018-12929

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue allows for XSS via the FirstName and LastName fields. Recommendations For PHP Scripts Mall Car Rental Script version 2.0.8, consider validating and sanitizing user input fo...

PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...

CVE-2018-14541

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

CVE-2018-14541

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

CVE-2018-14541

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

CVE-2018-14541: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

Basic B2B Script 2.0.0 - Cross-Site Scripting

Basic B2B Script 2.0.0 - Cross-Site Scripting. CVE-2018-14541. Webapps exploit for PHP platform Exploit Title: PHP Scripts Mall Basic B2B Script 2.0.0 has Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. Date: 20.07.2018 Site Titel : B2B Script Vendor...