CVE-2018-11501

Description

References

• gkaim.com/cve-2018-11501-vikas-chaudhary · Exploit
• whitehatck01.blogspot.com/2018/02/website-seller-script-203-stored-xss.html · Exploit

website seller script 的其他漏洞

• CVE-2018-20631中危 5.3PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
• CVE-2018-20530中危 5.4PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
• CVE-2018-15897中危 6.5PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First N…
• CVE-2018-15896中危 5.4PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
• CVE-2018-6879高危 8.8PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers …