CVE-2018-6870

Mô tả

Tham khảo

• 0day4u.wordpress.com/2018/03/19/website-seller-script-reflected-xss · Exploit

Lỗ hổng khác của website seller script

• CVE-2018-20631TRUNG BÌNH 5.3PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
• CVE-2018-20530TRUNG BÌNH 5.4PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
• CVE-2018-15897TRUNG BÌNH 6.5PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First N…
• CVE-2018-15896TRUNG BÌNH 5.4PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
• CVE-2018-11501CAO 8.8PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.