CVE-2018-11501

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.

• CWE-79
• CWE-352

• https://gkaim.com/cve-2018-11501-vikas-chaudhary/Exploit, Third Party Advisory
• https://whitehatck01.blogspot.com/2018/02/website-seller-script-203-stored-xss.htmlExploit, Third Party Advisory
• https://gkaim.com/cve-2018-11501-vikas-chaudhary/Exploit, Third Party Advisory
• https://whitehatck01.blogspot.com/2018/02/website-seller-script-203-stored-xss.htmlExploit, Third Party Advisory

Published

May 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11495OpenCart through 3.0.2.0 allows directory traversal in the e…
• CVE-2018-11496In Long Range Zip (aka lrzip) 0.631, there is a use-after-fr…6.5
• CVE-2018-11498In Lizard v1.0 and LZ5 v2.0 (the prior release, before the p…
• CVE-2018-11499A use-after-free vulnerability exists in handle_error() in s…
• CVE-2018-1150NUUO's NVRMini2 3.8.0 and below contains a backdoor that wou…
• CVE-2018-11500An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-11502An issue was discovered in the Moderator Log Notes plugin 1.…
• CVE-2018-11503The isfootnote function in markdown.c in libmarkdown.a in DI…
• CVE-2018-11504The islist function in markdown.c in libmarkdown.a in DISCOU…
• CVE-2018-11505The Werewolf Online application 0.8.8 for Android allows att…
• CVE-2018-11506The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the L…7.8
• CVE-2018-11507An issue was discovered in Free Lossless Image Format (FLIF)…