Denial of Service Vulnerability in PHP Scripts Mall Advanced Real Estate Script
CVE-2018-15188

6.5MEDIUM

Key Information:

Vendor: Advanced Real Estate Script Project
Status: Advanced Real Estate Script
Vendor: CVE Published:; 10 August 2018

🔔 Create Advanced Real Estate Script Project Vulnerability Alert

What is CVE-2018-15188?

The Advanced Real Estate Script from PHP Scripts Mall, version 4.0.9, is susceptible to a denial of service attack that can be triggered by passing specially crafted JavaScript code through the 'Name' field in user profiles. This exploits the application's inability to properly handle malicious input, resulting in a disruption of the page structure and rendering the service unavailable to legitimate users.

References

https://gkaim.com/cve-2018-15188-vikas-chaudhary/

x_refsource_MISC

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 10, 2018
Vulnerability Reserved
Aug 7, 2018

CVE-2018-15188 Data

JSON