CVE-2018-6796: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting

Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

PT-2018-17750

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of user...

CVE-2018-6364: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

PT-2018-17507

Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0 Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter. Recommendations For versions prior to 3.0, update to versi...

Real Estate MLM plan script 1.0 - 'srch' SQL Injection

Exploit Title: Real Estate MLM plan script v1.0 - 'srch' Parameter SQL Injection Date: 2017-09-28 Exploit Author: 8bitsec Vendor Homepage: http://www.mlmscript.in/ Software Link: http://www.mlmscript.in/real-estate-mlm-script.html Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email:...