PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name Last Name Company Name or Fax field as demonstrated by crossPwn.