CVE-2023-3858

CVE-2023-3858 affects phpscriptpoint Car Listing 1.6. The vulnerability originates in the /search.php file, where manipulating the country/state/city arguments enables cross-site scripting. Remote initiation is possible per the initial record. The consolidated connected documents consistently des...

CVE-2023-3859

CVE-2023-3859 affects phpscriptpoint Car Listing 1.6. The vulnerability exists in the GET Parameter Handler for the file /search.php, where manipulation of the arguments brand_id, model_id, car_condition, car_category_id, body_type_id, fuel_type_id, transmission_type_id, year, mileage_start, mile...