EUVD-2017-8754

Malware in sbrugna...

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20642

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20642

CVE-2018-20642 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. The vulnerability is triggered by crafted JavaScript in the KeySkills field, causing a denial of service (outage of profile editing). Documents confirm the affected product and root cause (malformed input in KeySkills) ...

CVE-2018-20640

The vulnerability described for CVE-2018-20640 affects the PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. It is a stored Cross-Site Scripting (XSS) vulnerability triggered via the Full Name field, as indicated across multiple sources (NVD entry and mirrored records). The root cause detail...

PT-2019-10139

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, specifically an outage of profile editing, by injecting crafted JavaScript code into the KeySkills fiel...

PT-2019-10140

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a directory traversal vulnerability. This can be exploited via a direct request for a listing of an image directory, such as the assets/ directory...

PT-2019-10138

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations: For PHP Scripts Mall Entrepreneur Job Portal Script version...

PT-2019-10137

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the Full Name field. This allows an attacker to inject malicious scripts into the...

PT-2019-10135

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns HTML injection via the Search Bar, which could potentially allow attackers to inject malicious HTML code. Recommendations: For PHP Scripts Mall...

CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20642: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20641: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20640: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...

CVE-2018-20639: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-7469

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...

CVE-2018-7469: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...

PT-2018-18085

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.9 Description The issue concerns a Cross-Site Scripting XSS flaw. It is located in the p name field, also known as the Edit Category Name field, which is accessible through the...

CVE-2017-17596

Entrepreneur Job Portal Script 2.0.6 contains a SQL Injection (CVE-2017-17596) in the jobsearch_all.php rid1 parameter. This affects the PHP Scripts Mall Entrepreneur Job Portal Script and enables remote injection of SQL commands via the rid1 input. Public exploits exist (e.g., Exploit-DB, Packet...

PT-2017-14891

Name of the Vulnerable Software and Affected Versions Entrepreneur Job Portal Script version 2.0.6 Description The issue is related to SQL Injection, which occurs via the rid1 parameter in the "jobsearch all.php" endpoint. This allows for potential exploitation. Recommendations For Entrepreneur J...