PT-2017-15102 · Php Scripts Mall · Php Scripts Mall Professional Service Script

Publicado 2017-12-26 · Atualizado 2018-01-10 · CVE-2017-17925

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script (affected versions not specified)

Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input validation in the website title parameter of the admin/general settingupd.php page.

Recommendations For PHP Scripts Mall Professional Service Script, as a temporary workaround, consider validating and sanitizing the website title parameter in the admin/general settingupd.php page to prevent malicious code injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-17925

Produtos afetados

Php Scripts Mall Professional Service Script

Referências · 2

• 🔥 https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-17925 · Nota de Segurança