3 matches found
CVE-2019-7430: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
5.3CVSS5.8AI score0.01043EPSS
SaveExploits1References2
CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
6.5CVSS5.7AI score0.01366EPSS
SaveExploits1References2
CVE-2018-6902: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
5.4CVSS5.9AI score0.00513EPSS
SaveExploits1References2
20