PT-2019-10132 · Php Scripts Mall · Php Scripts Mall Chartered Accountant : Auditor Website

Publicado 2019-03-20 · Atualizado 2020-08-24 · CVE-2018-20636

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1

Description: The issue concerns HTML injection via the First Name field.

Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Name field, ensuring proper input validation and sanitization to mitigate the risk.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-20636

Produtos afetados

Php Scripts Mall Chartered Accountant : Auditor Website

Referências · 3

• 🔥 https://gkaim.com/cve-2018-20636-vikas-chaudhary · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20636 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20636 · Aviso do Fabricante