PT-2018-18985
CVE-2018-9328
·
تاريخ النشر
2018-04-05
·
تاريخ التحديث
2018-05-09
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Redbus Clone Script version 3.0.6
Description
The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the
ter from or tag parameter in the "results.php" endpoint.Recommendations
For PHP Scripts Mall Redbus Clone Script version 3.0.6, consider validating and sanitizing user input for the
ter from and tag parameters in the "results.php" endpoint to prevent malicious script execution. As a temporary workaround, restrict access to the "results.php" endpoint until a proper fix is applied.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾