6 matches found
CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
PT-2019-18604
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4,...
CVE-2019-7430: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
PT-2019-18603
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...
CVE-2018-6902: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
PT-2018-17810
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.3 Description The issue concerns a problem where an attacker can inject malicious code via the Full Name field in an Edit Profile action, potentially leading to unauthorized actions on the...