PT-2019-18987 · Php Scripts Mall · Php Scripts Mall Responsive Video News Script

Aniket Dinda · Published 2019-02-16 · Updated 2019-02-19 · CVE-2019-8361

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Video News Script (affected versions not specified)

Description The issue allows for XSS via the Search Bar, which could be used for HTML injection or URL redirection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-8361

Affected Products

Php Scripts Mall Responsive Video News Script

References · 3

• 🔥 https://hackingvila.wordpress.com/2019/02/16/xss-vulnerability-in-responsive-video-news-script-php-script-mall · Exploit
• 🔥 https://hackingvila.wordpress.com/2019/02/16/url-redirection-through-html-injection-in-responsive-video-news-script-php-script-mall · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8361 · Security Note