CVE-2019-7359

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7359

The CVE describes an exploitable heap overflow in the AcCellMargin handling code during DXF parsing in Autodesk AutoCAD 2018 and related 2018-era products (Advance Steel, Architecture, Electrical, Map 3D, Mechanical, MEP, P&ID, Plant 3D, LT, Civil 3D). The vulnerability arises when parsing a DXF ...

CVE-2019-7361

The vulnerability CVE-2019-7361 affects Autodesk 2018 product family, including Advance Steel 2018, AutoCAD 2018, AutoCAD Architecture 2018, AutoCAD Electrical 2018, AutoCAD Map 3D 2018, AutoCAD Mechanical 2018, AutoCAD MEP 2018, AutoCAD P&ID 2018, AutoCAD Plant 3D 2018, AutoCAD LT 2018, and Civi...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

CVE-2018-20635

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20632

PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20630

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20634

PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...

Directory traversal

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

Cross site scripting

PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...

PHP Scripts Mall Advance B2B Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the FIRST NAME or LAST NAME field...

PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...

CVE-2018-20635

CVE-2018-20635 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a directory traversal flaw triggered by a direct request to list an image directory (e.g., assets/), which could allow access to arbitrary files on the server. Exploitation details are not provided in the suppl...

CVE-2018-20634

CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...

CVE-2018-20633

CVE-2018-20633 affects PHP Scripts Mall Advance B2B Script 2.1.4, with a Cross-Site Request Forgery (CSRF) vulnerability exposed via the Edit Profile feature. The connected records consistently identify the vulnerable component as the Advance B2B Script 2.1.4 and describe the issue as CSRF via Ed...

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20632

CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...

Advance Gift Shop Pro Script 2.0.3 - SQL Injection

Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 21, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...

CVE-2019-6126

The CVE-2019-6126 entry concerns PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0. The vulnerability is an access-control bypass in the Admin Panel, where remote attackers can bypass restrictions by directly requesting admin/dashboard.php or admin/user.php, leading to disclosure of informa...