RSS   Vulnerabilities for 'Website broker script'   RSS

2018-04-12
 
CVE-2018-6900

CWE-79
 

 
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.

 
2017-10-31
 
CVE-2017-15992

CWE-89
 

 
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

 


Copyright 2024, cxsecurity.com

 

Back to Top