PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
References
Link | Resource |
---|---|
https://gkaim.com/cve-2018-20637-vikas-chaudhary/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2019-03-21 09:00
Updated : 2019-03-25 10:33
NVD link : CVE-2018-20637
Mitre link : CVE-2018-20637
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
chartered_accountant_\
- _auditor_website_project