CVE-2018-6878

The connected sources confirm CVE-2018-6878 affects PHP Scripts Mall Hot Scripts Clone Script Classified 3.1, with a Cross Site Scripting (XSS) vulnerability in the review section exploitable via the title or description fields. The documents do not specify whether the issue is stored or reflecte...

CVE-2018-6903

CVE-2018-6903 affects PHP Scripts Mall Hot Scripts Clone Script Classified v3.1, where client-side validation of an email address can be bypassed by removing the validation code. This client-side enforcement allows a remote attacker to modify a registered email address. The provided documents con...

CVE-2018-7650

Summary: CVE-2018-7650 corresponds to a stored XSS in PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, specifically in the Add New section for a Management User. The issue arises because the input in the name parameter is not sanitized, allowing injected JavaScript to be rendered...

CVE-2017-17612

The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...