PT-2019-18603 · Php Scripts Mall · Php Scripts Mall Image Sharing Script

Publicado 2019-03-20 · Atualizado 2020-08-24 · CVE-2019-7430

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4

Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution.

Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4, consider restricting access to the Search Bar functionality until a fix is available. As a temporary workaround, input validation and sanitization should be implemented to prevent malicious HTML code injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-7430

Produtos afetados

Php Scripts Mall Image Sharing Script

Referências · 3

• 🔥 https://gkaim.com/cve-2019-7430-vikas-chaudhary · Exploit
• https://osv.dev/vulnerability/CVE-2019-7430 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7430 · Nota de Segurança