CVE-2018-12053: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in deleteimg.php by using directory traversal...

PT-2018-10975

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue allows for Arbitrary File Read via the f parameter in the "img.php" endpoint. This is achieved through absolute path traversal, enabling...

PT-2018-10973

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue exists due to SQL Injection in the PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability is exploitable via the ...

PT-2018-10972

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue concerns Arbitrary File Upload and Remote Code Execution in PHP Scripts Mall Schools Alert Management Script. This is achieved through the $...

PT-2018-10976

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue concerns SQL Injections in PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability exists via crafted POST data in...

PT-2018-10974

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue allows for Arbitrary File Deletion via the img parameter in the "delete img.php" endpoint by utilizing directory traversal. Recommendations...

NUUO NVRmini 2 Arbitrary File Upload Vulnerability

The NUUO NVRmini 2 is a video storage management device from NUUO USA. A security vulnerability exists in the upload.php file in the NUUO NVRmini 2. An attacker can exploit this vulnerability to upload arbitrary files e.g., .php files...

CVE-2018-11514

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...

CVE-2018-11514

The CVE affects PHP Scripts Mall Naukri Clone Script (version 3.0.3 and earlier). The vulnerability resides in edit_resume_det.php, allowing Unrestricted Upload of a File with a Dangerous Type (e.g., renaming .docx to .php). This could enable an attacker to upload a malicious PHP file, potentiall...

CVE-2018-11514: Unrestricted Upload of File with Dangerous Type

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in editresumedet.php, as demonstrated by changing .docx to .php...

CVE-2018-11501

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...

Cross site request forgery (csrf)

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...

CVE-2018-11501

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...

CVE-2018-11501

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...

CVE-2018-11501

The CVE-2018-11501 entry concerns PHP Scripts Mall Website Seller Script 2.0.3, where a CSRF flaw in user_submit.php?upd=2 enables an XSS outcome. The connected records corroborate the same vulnerability description across multiple databases, including NVD, CVE List, CNVD, and others. According t...

EasyService Billing 1.0 - Cross-Site Request Forgery

EasyService Billing 1.0 - Cross-Site Request Forgery history.pushState'', '', '/' input typ...

CVE-2018-11501: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...

PT-2018-10618

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.3 Description The issue allows for CSRF via the user submit.php endpoint with the upd parameter set to 2, resulting in XSS. Recommendations For version 2.0.3, as a temporary workaround, consid...

EasyService Billing 1.0 - Cross-Site Request Forgery

history.pushState'', '', '/'...

PT-2018-10481

Name of the Vulnerable Software and Affected Versions Joomla! Core versions prior to 3.8.8 Description An issue was discovered that could allow PHAR files to be handled as executable PHP scripts by the webserver, depending on the server configuration. Recommendations For versions prior to 3.8.8,...