PT-2018-18085
CVE-2018-7469
·
تاريخ النشر
2018-02-28
·
تاريخ التحديث
2018-03-16
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.9
Description
The issue concerns a Cross-Site Scripting (XSS) flaw. It is located in the
p name field, also known as the Edit Category Name field, which is accessible through the "admin/categories industry.php" page, also referred to as Categories - Industry Type.Recommendations
For PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.9, consider restricting access to the
p name field in the admin/categories industry.php page until a fix is available. As a temporary workaround, avoid using the p name field for editing category names to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾