94 matches found
Cross site scripting
A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235209 was...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The attack may be launched remotely. The...
CVE-2023-3857 phpscriptpoint Ecommerce product.php cross site scripting
A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235209 was...
CVE-2023-3857
CVE-2023-3857 affects phpscriptpoint Ecommerce 1.15. The vulnerability lies in an unknown part of the file /product.php where manipulation of the parameter id leads to cross-site scripting (XSS). It can be exploited remotely. Multiple connected sources reaffirm the issue without providing a publi...
CVE-2023-3856 phpscriptpoint Ecommerce blog-single.php cross site scripting
A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The attack may be launched remotely. The...
CVE-2023-3856 phpscriptpoint Ecommerce blog-single.php cross site scripting
A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The attack may be launched remotely. The...
CVE-2023-3856
CVE-2023-3856 affects phpscriptpoint Ecommerce 1.15. The issue is a cross-site scripting (XSS) vulnerability in the blog-single.php file, due to manipulation of the slug parameter. Exploitation may be remote, and the risk affects unknown functionality of that file. Multiple sources (NVD, CVE list...
CVE-2023-3855
A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /search-result.php. The manipulation of the argument kw/lc/ct/cp/p leads to cross site scripting. The attack can be launched remotely. The...
CVE-2023-3855
A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /search-result.php. The manipulation of the argument kw/lc/ct/cp/p leads to cross site scripting. The attack can be launched remotely. The...
Cross site scripting
A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /search-result.php. The manipulation of the argument kw/lc/ct/cp/p leads to cross site scripting. The attack can be launched remotely. The...
PT-2023-26515 · Unknown · Phpscriptpoint Ecommerce
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Ecommerce version 1.15 Description: A problematic issue was found in the software, affecting an unknown part of the file /product.php. The manipulation of the id argument leads to cross-site scripting. It is possible to initiat...
PT-2023-26511 · Unknown · Phpscriptpoint Ecommerce
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Ecommerce version 1.15 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /blog-single.php. The manipulation of the slug argument leads to cross-site scripting. The...
PT-2023-26519 · Unknown · Phpscriptpoint Car Listing
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Car Listing version 1.6 Description: A vulnerability has been found in the /search.php file, where the manipulation of the country/state/city argument leads to cross-site scripting. The attack can be initiated remotely. The...
PT-2023-26530 · Unknown · Phpscriptpoint Insurance
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Insurance version 1.2 Description: A vulnerability was found in the file /search.php, which leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not...
PT-2023-26526 · Unknown · Phpscriptpoint Insurance
Name of the Vulnerable Software and Affected Versions: phpscriptpoint Insurance version 1.2 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /page.php, leading to cross site scripting. The manipulation can be launched...
CVE-2023-3855
CVE-2023-3855 affects phpscriptpoint JobSeeker 1.5. The vulnerability exists in an unknown function within /search-result.php, where manipulating the kw, lc, ct, cp, or p parameters triggers cross-site scripting. Exploitation can be remote. Public references consistently describe a cross-site scr...
CVE-2023-3854
A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/bloodgroupid leads to sql injection. It is possible to launch the attac...
CVE-2023-3854
A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/bloodgroupid leads to sql injection. It is possible to launch the attac...
CVE-2023-3853
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...
Sql injection
A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/bloodgroupid leads to sql injection. It is possible to launch the attac...