845 matches found
Basic B2B Script 2.0.0 Cross Site Scripting
Exploit Title: PHP Scripts Mall Basic B2B Script 2.0.0 has Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. Date: 20.07.2018 Site Titel : B2B Script Vendor Homepage: https://www.phpscriptsmall.com/ Vendor Software :...
PT-2018-12572
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Basic B2B Script version 2.0.0 Description The issue concerns Reflected and Stored XSS that can be triggered via specific fields, including First name, Last name, Address 1, City, State, and Company name. Recommendations For P...
Basic B2B Script 2.0.0 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP Scripts Mall Basic B2B Script 2.0.0 has Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. Site Titel : B2B Script Vendor Homepage: https://www.phpscriptsmall.com/ Vendor Software :...
CVE-2018-14082
PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...
CVE-2018-14082
PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...
CVE-2018-14082
PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...
CVE-2018-14082
CVE-2018-14082 affects the PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 and is described as a Cross‑site Scripting (XSS) vulnerability exploitable via the search bar. Connected sources (ExploitDB/NVD) indicate public PoCs/exploits for a stored XSS vector via the search field. The documents do...
PT-2018-12329
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall JOB SITE aka Job Portal version 3.0.1 Description The issue concerns a Cross-site Scripting XSS flaw that can be triggered via the search bar. Recommendations For version 3.0.1, update to a newer version that contains a fix fo...
CVE-2018-14082: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...
PHP Scripts Mall Auditor Website Cross-Site Scripting Vulnerability
PHP Scripts Mall Auditor Website is an accounting auditor website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Auditor Website version 2.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with th...
CVE-2018-13256
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...
CVE-2018-13256
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...
CVE-2018-13256
The CVE-2018-13256 issue affects the PHP Scripts Mall Auditor Website 2.0.1, where the firstname and lastname parameters are vulnerable to Cross‑Site Scripting (XSS). The connected sources describe both reflected and stored XSS vectors demonstrated in PoCs/exploits for version 2.0.1, confirming a...
CVE-2018-13256: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...
PT-2018-11721
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auditor Website version 2.0.1 Description The issue allows for XSS via the lastname or firstname parameter. Recommendations For PHP Scripts Mall Auditor Website version 2.0.1, update the software to a version that fixes this...
Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11371)
PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the...
CVE-2018-12055
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contactus.php, faq.php, about.php, photogallery.php, privacy.php, and so on...
Remote code execution
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type...