PT-2018-13277
CVE-2018-15897
·
تاريخ النشر
2018-08-28
·
تاريخ التحديث
2018-11-08
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Website Seller Script version 2.0.5
Description
The issue allows remote attackers to cause a denial of service via crafted JavaScript code in the
First Name, Last Name, Company Name, or Fax field.Recommendations
For PHP Scripts Mall Website Seller Script version 2.0.5, consider validating and sanitizing user input in the
First Name, Last Name, Company Name, and Fax fields to prevent the execution of crafted JavaScript code. As a temporary workaround, restrict access to these fields until a proper fix is applied. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾