Lucene search

K

Professional Service Script Security Vulnerabilities

cve
cve

CVE-2017-17924

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to...

5.3CVSS

5.2AI Score

0.003EPSS

2017-12-27 05:08 PM
25
cve
cve

CVE-2017-17926

PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail...

5.3CVSS

5.4AI Score

0.003EPSS

2017-12-27 05:08 PM
19
cve
cve

CVE-2017-17929

PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view...

4.8CVSS

4.9AI Score

0.001EPSS

2017-12-27 05:08 PM
23
cve
cve

CVE-2017-17930

PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user...

8.8CVSS

8.6AI Score

0.001EPSS

2017-12-27 05:08 PM
20
cve
cve

CVE-2017-17927

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to...

5.3CVSS

5.1AI Score

0.003EPSS

2017-12-27 05:08 PM
19
cve
cve

CVE-2017-17925

PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title...

4.8CVSS

5AI Score

0.001EPSS

2017-12-27 05:08 PM
25
cve
cve

CVE-2017-17928

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id...

9.8CVSS

9.8AI Score

0.002EPSS

2017-12-27 05:08 PM
19