CVE-2023-3858

A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-79

• https://vuldb.com/?ctiid.235210Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235210Third Party Advisory
• https://vuldb.com/?ctiid.235210Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235210Third Party Advisory

Published

Jul 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38572The issue was addressed with improved checks. This issue is …7.5
• CVE-2023-38573A use-after-free vulnerability exists in the way Foxit Reade…8.8
• CVE-2023-38574Open redirect vulnerability in VI Web Client prior to 7.9.6 …6.1
• CVE-2023-38575Non-transparent sharing of return predictor targets between …5.5
• CVE-2023-38576Hidden functionality vulnerability in LAN-WH300N/RE all vers…8
• CVE-2023-38579 The cross-site request forgery token in the req…8.8
• CVE-2023-38580The issue was addressed with improved memory handling. This …7.8
• CVE-2023-38581Buffer overflow in Intel(R) Power Gadget software for Window…8.8
• CVE-2023-38582 Persistent cross-site scripting (XSS) in the web ap…5.4
• CVE-2023-38583A stack-based buffer overflow vulnerability exists in the LX…7.8
• CVE-2023-38584 In Weintek's cMT3000 HMI Web CGI device, the cgi-bin …9.8
• CVE-2023-38585Improper authentication vulnerability in the CBC products al…8.8