TI-2017-12883 CVE-2017-17612 · GHSA-wvx2-ppc9-j3wj
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
Priority MEDIUM 48
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
Hot Scripts Clone Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Hot Scripts Clone Project records in CISA KEVNo Hot Scripts Clone Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Hot Scripts Clone · all components
TI-2018-05039 CVE-2018-6903 · GHSA-pwhp-x856-h8w6
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce…
Priority MEDIUM 40
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation co…
TI-2018-05024 CVE-2018-6878 · GHSA-m4cm-mcp3-vjf7
Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts…
Priority LOW 25
Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field.
TI-2018-05512 CVE-2018-7650 · GHSA-j6wc-m838-f4g8
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is…
Priority LOW 23
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User.