CVE-2018-9328

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Redbus Clone Script version 3.0.6

Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the ter from or tag parameter in the "results.php" endpoint.

Recommendations For PHP Scripts Mall Redbus Clone Script version 3.0.6, consider validating and sanitizing user input for the ter from and tag parameters in the "results.php" endpoint to prevent malicious script execution. As a temporary workaround, restrict access to the "results.php" endpoint until a proper fix is applied.