PT-2018-16807

Name of the Vulnerable Software and Affected Versions Fork CMS version 5.0.7 Description The issue concerns a cross-site scripting XSS problem. It is located in the /private/en/pages/edit API endpoint, specifically via the title parameter. Recommendations For Fork CMS version 5.0.7, as a temporar...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01239)

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/eventadd.ph...

Design/Logic Flaw

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

CVE-2017-17988

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

GoodTravel Travel And Locations 1.0 Cross Site Scripting Vulnerability

GoodTravel Travel and Locations PHP script and mobile application version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: GoodTravel - Travel & Locations PHP Script & Mobile App - xss Google Dork: N/A Date: 2017/28/12 Exploit Author: ShanoWeb Author Mail :...

PT-2017-15144

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. Specifically, it involves the event title parameter in the "admin/event...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability (CNVD-2018-00494)

Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the admin/generalsettingupd.php...

CVE-2017-17940: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

PT-2017-15116

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...

Code injection

PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...

PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

Sendroid Bulk SMS Portal / Marketing Script 6.5.0 SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Piwigo Configuration Component Cross-Site Scripting Vulnerability

Piwigo is a set of web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Configuration component is a component for configuration. A cross-site scripting vulnerability exists in the Configuration...

CVE-2017-17826

The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallerytitle parameter in an admin.php?page=configuration&section=main request. An attacker can exploit this to hijack a client's browser along with the data stored in it...

Cross site scripting

The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallerytitle parameter in an admin.php?page=configuration&section=main request. An attacker can exploit this to hijack a client's browser along with the data stored in it...

PT-2017-15031

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue affects the Configuration component, where a Persistent Cross Site Scripting vulnerability exists via the gallery title parameter in an "admin.php?page=configuration&section=main" request. This can be...

Monstra CMS 3.0.4 Remote Shell Upload Vulnerability

Monstra CMS version 3.0.4 suffers from a remote shell upload vulnerability that allows for remote code execution. Exploit Title: Monstra CMS - 3.0.4 RCE Vendor Homepage: http://monstra.org/ Software Link: https://bitbucket.org/Awilum/monstra/downloads/monstra-3.0.4.zip Discovered by: Ishaq Mohamm...