PT-2019-10126

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance Crowdfunding Script version 2.0.3 Description: The issue allows for directory traversal through a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory...

PT-2019-10122

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue concerns HTML injection via the search box, allowing potential malicious activities. Recommendations: For PHP Scripts Mall Consumer Reviews Script version 4.0.3,...

PT-2019-18602

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Property Rental Software version 2.1.4 Description The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2016/08' directory. Recommendations For PHP...

PT-2019-18604

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4,...

PT-2019-18605

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns HTML injection via the STREET field in the Profile Edit section. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update the software to a...

PT-2019-18603

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...

PT-2019-18607

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3,...

PT-2019-18606

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update to a newer...

PT-2019-18609

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...

PT-2019-18608

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...

PT-2019-18610

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...

CVE-2019-7437: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...

CVE-2019-7435: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7433: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7430: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

CVE-2019-7429: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...

CVE-2018-20648: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...

CVE-2018-20647: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...