1351 matches found
CVE-2017-17940: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...
CVE-2017-17953: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...
CVE-2017-17958: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
PHP Scripts Mall Professional Service Script Information Disclosure Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. An information disclosure vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit the vulnerability by sending PATHINFO via a speciall...
PHP Scripts Mall Professional Service Script Predictable Registration URL Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A predictable registration URL vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker could exploit this vulnerability to register with an invali...
CVE-2017-17952: Improper Input Validation
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17941: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability (CNVD-2018-00494)
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the admin/generalsettingupd.php...
CVE-2017-17955: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17925
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
CVE-2017-17929
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...
CVE-2017-17930
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
CVE-2017-17908
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17906
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17931
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...
CVE-2017-17905
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...