PT-2019-18987 · Php Scripts Mall · Php Scripts Mall Responsive Video News Script

Aniket Dinda · Publicado 2019-02-16 · Atualizado 2019-02-19 · CVE-2019-8361

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Video News Script (affected versions not specified)

Description The issue allows for XSS via the Search Bar, which could be used for HTML injection or URL redirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-8361

Produtos afetados

Php Scripts Mall Responsive Video News Script

Referências · 3

• 🔥 https://hackingvila.wordpress.com/2019/02/16/xss-vulnerability-in-responsive-video-news-script-php-script-mall · Exploit
• 🔥 https://hackingvila.wordpress.com/2019/02/16/url-redirection-through-html-injection-in-responsive-video-news-script-php-script-mall · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8361 · Nota de Segurança