1488 matches found
CVE-2018-6904
CVE-2018-6904 affects PHP Scripts Mall Car Rental Script 2.0.8. The issue is an XSS vulnerability in the User Name field during an Edit Profile action. According to the NVD details, the vulnerability has a CVSS v2 base score of 3.5 (LOW) and a CVSS v3 base score of 5.4 (MEDIUM). The metrics indic...
CVE-2018-6934
The CVE-2018-6934 entry describes a CSRF vulnerability in the PHP Scripts Mall Online Tutoring Script 2.0.3, specifically affecting the student/personal-info component. The connected documents corroborate the issue across NVD and CVE listings, though they do not provide additional details on the ...
CVE-2018-6935
CVE-2018-6935 affects PHP Scripts Mall Student Profile Management System Script v2.0.6, where an XSS vulnerability exists in the Name field of list_student.php. The available records confirm the vulnerability exists but do not provide exploitation details, affected product build numbers beyond v2...
CVE-2018-6934: Cross-Site Request Forgery (CSRF)
CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3...
CVE-2018-6902: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6903: Improper Input Validation
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
CVE-2018-6904: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action...
CVE-2018-6900: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page...
CVE-2018-6935: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
CVE-2018-6870: Improper Neutralization of Input During Web Page Generation
Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature...
CVE-2018-6879: Improper Input Validation
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
PT-2018-17809
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Broker Script version 3.0.6 Description The issue concerns a problem where an attacker can inject malicious code via the Last Name field on the My Profile page, potentially leading to unauthorized actions on the websit...
PT-2018-17811
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1 Description The issue concerns the validation of an e-mail address, which is enforced on the client side. This allows remote attackers to modify a registered e-mail address by...
PT-2018-17812
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the User Name field in an Edit Profile action. This allows for potential malicious script injection...
PT-2018-17793
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.3 Description A reflected XSS issue exists in the Listings Search feature, allowing for potential exploitation. Recommendations For version 2.0.3, update the Listings Search feature to properl...
PT-2018-17810
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.3 Description The issue concerns a problem where an attacker can inject malicious code via the Full Name field in an Edit Profile action, potentially leading to unauthorized actions on the...
PT-2018-17829
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Student Profile Management System Script version 2.0.6 Description The issue concerns a problem where an attacker can inject malicious code into the Name field, which is then executed when the list student.php page is accessed...
PT-2018-17828
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Tutoring Script version 2.0.3 Description The issue exists in the student/personal-info endpoint, where a CSRF flaw is present. Recommendations For PHP Scripts Mall Online Tutoring Script version 2.0.3, consider...
PT-2018-17799
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.3 Description The issue allows remote attackers to modify a registered e-mail address by removing the validation code, as the validation of an e-mail address is enforced on the client side...
