PT-2019-10128

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the FIRST NAME or LAST NAME field. Recommendations: For PHP Scripts Mall Advance B2B Script version...

CVE-2018-20634: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...

CVE-2018-20633: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

PT-2019-10130

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...

PT-2019-10129

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...

CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...