Design/Logic Flaw

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15188

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

CVE-2018-15187

CVE-2018-15187 concerns PHP Scripts Mall’s advanced-real-estate-script v4.0.9, where a Cross-Site Request Forgery (CSRF) flaw in edit-profile.php enables unauthorized actions. The CVSS details indicate a high-severity impact (CVSS3 8.0, HIGH; vector: NETWORK, LOW attack complexity, PR: LOW, UI: R...

CVE-2018-15189

The CVE-2018-15189 issue affects PHP Scripts Mall advanced-real-estate-script, with a cross-site scripting (XSS) vulnerability exploitable via the Name field in a user profile. The root cause is insufficient input handling/sanitization of the Name field, enabling HTML injection. Public references...

CVE-2018-15188

The vulnerability CVE-2018-15188 affects PHP Scripts Mall advanced-real-estate-script v4.0.9, where remote attackers can cause a denial of service (page structure loss) by submitting crafted JavaScript in the Name field of a profile. This is documented across CVE/NVD and CNVD entries; exploitatio...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15189

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

housing.com XSS vulnerability

Open Bug Bounty ID: OBB-642821 Description| Value ---|--- Affected Website:| housing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shuttleworth-estate.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-636892 Description| Value ---|--- Affected Website:| shuttleworth-estate.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FBI’s BEC Crackdown Leads To 74 Arrests Globally

The FBI announced Monday the results of a major crackdown on scammers behind business email compromise BEC campaigns that resulted in 74 arrests and the retrieval of millions of dollars. Several U.S. federal authorities and police from other countries were involved in Operation WireWire, a...

Feds Arrest 74 Email Fraudsters Involved in Nigerian BEC Scams

The United States Department of Justice announced Monday the arrest of 74 email fraudsters across three continents in a global crackdown on a large-scale business email compromise BEC scheme. The arrest was the result of a six-month-long operation dubbed "Operation Wire Wire" that involved the US...

housing.com XSS vulnerability

Open Bug Bounty ID: OBB-620691 Description| Value ---|--- Affected Website:| housing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

houseviewonline.com XSS vulnerability

Open Bug Bounty ID: OBB-614816 Description| Value ---|--- Affected Website:| houseviewonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

luxuryrealestate.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-613521 Description| Value ---|--- Affected Website:| luxuryrealestate.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

waratahestateagents.com.au XSS vulnerability

Open Bug Bounty ID: OBB-609877 Description| Value ---|--- Affected Website:| waratahestateagents.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thousand-islands-real-estate.com XSS vulnerability

Open Bug Bounty ID: OBB-592386 Description| Value ---|--- Affected Website:| thousand-islands-real-estate.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

estate-ems.com XSS vulnerability

Open Bug Bounty ID: OBB-585440 Description| Value ---|--- Affected Website:| estate-ems.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

accresrealestate.nl XSS vulnerability

Open Bug Bounty ID: OBB-575531 Description| Value ---|--- Affected Website:| accresrealestate.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...