PT-2019-10132 · Php Scripts Mall · Php Scripts Mall Chartered Accountant : Auditor Website

Published 2019-03-20 · Updated 2020-08-24 · CVE-2018-20636

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1

Description: The issue concerns HTML injection via the First Name field.

Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Name field, ensuring proper input validation and sanitization to mitigate the risk.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-20636

Affected Products

Php Scripts Mall Chartered Accountant : Auditor Website

References · 3

• 🔥 https://gkaim.com/cve-2018-20636-vikas-chaudhary · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20636 · Security Note
• https://osv.dev/vulnerability/CVE-2018-20636 · Vendor Advisory