PT-2019-19745 · Php Scripts Mall · Php Scripts Mall Personal Video Collection Script

Aniket Dinda · Publicado 2019-03-06 · Atualizado 2019-03-07 · CVE-2019-9606

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Personal Video Collection Script version 4.0.4

Description The issue is related to Stored XSS, which occurs via the "Update profile" feature.

Recommendations For version 4.0.4, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-9606

Produtos afetados

Php Scripts Mall Personal Video Collection Script

Referências · 3

• 🔥 https://hackingvila.wordpress.com/2019/03/03/php-script-mall-personal-video-collection-script-has-stored-xss-in-edit-my-profile · Exploit
• https://osv.dev/vulnerability/CVE-2019-9606 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9606 · Nota de Segurança