PT-2018-18985 · Php Scripts Mall · Php Scripts Mall Redbus Clone Script
Manhnho
·
Published
2018-04-05
·
Updated
2018-05-09
·
CVE-2018-9328
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Redbus Clone Script version 3.0.6
Description
The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the
ter from or tag parameter in the "results.php" endpoint.Recommendations
For PHP Scripts Mall Redbus Clone Script version 3.0.6, consider validating and sanitizing user input for the
ter from and tag parameters in the "results.php" endpoint to prevent malicious script execution. As a temporary workaround, restrict access to the "results.php" endpoint until a proper fix is applied.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Php Scripts Mall Redbus Clone Script