34 matches found
CVE-2019-20337
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...
CVE-2019-20336
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...
EUVD-2019-10890
Malware in sbrugna...
EUVD-2018-7068
Malware in sbrugna...
EUVD-2018-7066
Malware in sbrugna...
EUVD-2019-10889
Malware in sbrugna...
Readymade Real Estate Script SQL Injection / Cross Site Scripting Vulnerabilities
x========================================================================================================================================x | Title : Readymade Real Estate Script Blind SQL & XSS Vulnerabilities | Software : Advanced Real Estate Script | Vendor : http://www.i-netsolution.com/ | Dat...
PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability
PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the 'searchtext' parameter of the search-results.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability...
CVE-2019-20337
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...
CVE-2019-20337
Summary: CVE-2019-20337 affects PHP Scripts Mall advanced-real-estate-script 4.0.9. The vulnerability is in news_edit.php, where the news_id parameter is vulnerable to SQL Injection. The root cause is improper input validation/sanitization of externally provided SQL statements. Reported impact in...
CVE-2019-20336: Improper Neutralization of Input During Web Page Generation
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...
CVE-2019-20337: Improper Neutralization of Special Elements used in an SQL Command
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...
PT-2020-10389
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a problem where the searchtext parameter in the "search-results.php" endpoint is vulnerable to XSS. This means an attacker could potentially inject...
PT-2020-10390
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a SQL Injection vulnerability. Specifically, the news id parameter in the news edit.php script is vulnerable. Recommendations For version 4.0.9, avoid...
Cross site request forgery (csrf)
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
CVE-2018-15189
The CVE-2018-15189 issue affects PHP Scripts Mall advanced-real-estate-script, with a cross-site scripting (XSS) vulnerability exploitable via the Name field in a user profile. The root cause is insufficient input handling/sanitization of the Name field, enabling HTML injection. Public references...
CVE-2018-15188
PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...
CVE-2018-15189: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...
CVE-2018-15187: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
PT-2018-12936
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...