PT-2018-18985 · Php Scripts Mall · Php Scripts Mall Redbus Clone Script

Manhnho · Publicado 2018-04-05 · Atualizado 2018-05-09 · CVE-2018-9328

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Redbus Clone Script version 3.0.6

Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the ter from or tag parameter in the "results.php" endpoint.

Recommendations For PHP Scripts Mall Redbus Clone Script version 3.0.6, consider validating and sanitizing user input for the ter from and tag parameters in the "results.php" endpoint to prevent malicious script execution. As a temporary workaround, restrict access to the "results.php" endpoint until a proper fix is applied.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-9328

Produtos afetados

Php Scripts Mall Redbus Clone Script

Referências · 3

• 🔥 https://pastebin.com/SbjwbYVr · Exploit
• https://osv.dev/vulnerability/CVE-2018-9328 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-9328 · Nota de Segurança