#VU14574 Buffer overflow in PHP Script Mall - CVE-2018-15897

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU14574

#VU14574 Buffer overflow in PHP Script Mall - CVE-2018-15897

Published: August 30, 2018


Vulnerability identifier: #VU14574
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-15897
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
PHP Script Mall
Software vendor:
PHP Script Mall

Description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to buffer overflow when handling malicious input. A remote attacker can send specially crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, trigger memory corruption and cause the application to crash.


Remediation

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

External links