7 matches found
CVE-2018-20530
The CVE pertains to PHP Scripts Mall Website Seller Script 2.0.5, with an XSS vulnerability exposed via the Profile field (e.g., Company Address/Personal Address). The issue is associated with CVE-2018-20530 and related to CVE-2018-15896. According to the provided documents, the vulnerability ena...
CVE-2018-11501
The CVE-2018-11501 entry concerns PHP Scripts Mall Website Seller Script 2.0.3, where a CSRF flaw in user_submit.php?upd=2 enables an XSS outcome. The connected records corroborate the same vulnerability description across multiple databases, including NVD, CVE List, CNVD, and others. According t...
CVE-2018-15897
CVE-2018-15897 affects PHP Scripts Mall Website Seller Script 2.0.5. A buffer overflow vulnerability (CNVD-2018-17655) allows remote attackers to cause a denial of service by sending specially crafted JavaScript in the First Name, Last Name, Company Name, or Fax fields. The NVD entry confirms DoS...
CVE-2018-15896
The CVE-2018-15896 entry describes a Cross-Site Scripting (XSS) vulnerability in PHP Scripts Mall Website Seller Script 2.0.5. The issue is triggered via input fields Personal Address or Company Name, allowing injected scripts to be reflected. Exploitation details are not provided beyond the XSS ...
CVE-2018-20631
CVE-2018-20631 affects PHP Scripts Mall Website Seller Script 2.0.5. The vulnerability is a path disclosure issue in image URL handling (e.g., requesting arbitrary image files like .png) that may expose sensitive path information. Concrete impact details beyond information disclosure are not prov...
CVE-2018-6870
The CVE-2018-6870 entry describes a Reflected XSS in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature. Affected software is PHP Scripts Mall Website Seller Script 2.0.3; root cause identified as reflected XSS through the Listings Search parameter. No exploit details or...
CVE-2018-6879
The CVE-2018-6879 entry concerns PHP Scripts Mall Website Seller Script 2.0.3 where client-side validation is used to enforce email format. The vulnerability arises because the validation can be bypassed by removing the client-side validation code, enabling a remote attacker to modify a registere...