Skip to main content

Hot Scripts Clone Project

4 CVEs vendor

Monthly

CVE-2018-6903 Apr 12, 22:29 HIGH POC This Week

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Hot Scripts Clone Hot Scripts Clone Project
NVD
CVSS 3.0
8.8
EPSS
1.1%
CVE-2018-7650 Mar 06, 15:29 MEDIUM POC This Month

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hot Scripts Clone Hot Scripts Clone Project
NVD
CVSS 3.0
4.8
EPSS
0.5%
CVE-2018-6878 Feb 09, 18:29 MEDIUM POC This Month

Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hot Scripts Clone Hot Scripts Clone Project
NVD Exploit-DB
CVSS 3.0
5.4
EPSS
0.6%
CVE-2017-17612 Dec 13, 09:29 CRITICAL POC Act Now

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Hot Scripts Clone Hot Scripts Clone Project
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
3.8%
EPSS 1% CVSS 8.8
HIGH POC This Week

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Hot Scripts Clone +1
NVD
EPSS 1% CVSS 4.8
MEDIUM POC This Month

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hot Scripts Clone +1
NVD
EPSS 1% CVSS 5.4
MEDIUM POC This Month

Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hot Scripts Clone +1
NVD Exploit-DB
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Hot Scripts Clone Hot Scripts Clone Project
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy