CVE-2018-15186: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15189: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15190: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

CVE-2018-15187: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

PT-2018-12935

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue allows remote attackers to cause a denial of service, resulting in page structure loss, by injecting crafted JavaScript code into the Name field of a user profile...

PT-2018-12936

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15183

PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...

CVE-2018-15182

CVE-2018-15182 affects PHP Scripts Mall Car Rental Script 2.0.8, with Cross‑Site Scripting via the FirstName and LastName fields. The connected documents corroborate an HTML/JS injection vulnerability in this script, but the provided materials do not specify the exact root cause, affected code lo...

CVE-2018-15184

CVE-2018-15184 affects PHP Scripts Mall Naukri/Shine/Jobsite Clone Script, version 3.0.4. The vulnerability is a stored cross-site scripting (XSS) issue in the USERNAME field, as described in multiple sources (notably the CVE entry and CNVD/NVD records). The root cause is input handling that allo...

PT-2018-12930

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script version 2.0.6 Description The issue concerns a Stored XSS flaw that can be triggered via the Full Name and Title fields. Recommendations For version 2.0.6, update to a newer...

PT-2018-12931

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue is related to Stored XSS via the USERNAME field. Recommendations For version 3.0.4, update to a newer version that contains a fix for this issue...

PT-2018-12929

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue allows for XSS via the FirstName and LastName fields. Recommendations For PHP Scripts Mall Car Rental Script version 2.0.8, consider validating and sanitizing user input fo...

CVE-2018-15183: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...

CVE-2018-15184: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...