CVE-2018-20530

概要

参考情報

• suku90.wordpress.com/2018/12/27/php-scripts-mall-website-seller-script-2-0-5-stored-and-reflected-xss · Exploit

website seller script のその他の脆弱性

• CVE-2018-20631中 5.3PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
• CVE-2018-15897中 6.5PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First N…
• CVE-2018-15896中 5.4PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
• CVE-2018-11501高 8.8PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
• CVE-2018-6879高 8.8PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers …