1166 matches found
CVE-2017-17926
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17927
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...
Cross site request forgery (csrf)
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
Code injection
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...
Sql injection
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...
Sql injection
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
Code injection
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
Cross site request forgery (csrf)
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
Code injection
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
Cross site request forgery (csrf)
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
Design/Logic Flaw
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
Code injection
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
Sql injection
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17929
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...
CVE-2017-17925
Summary: CVE-2017-17925 affects the PHP Scripts Mall Professional Service Script. The vulnerability is an XSS flaw in the admin/general_settingupd.php endpoint, specifically via the website_title parameter. This is documented across multiple sources (NVD and CNVD entries) as a cross-site scriptin...
CVE-2017-17929
The CVE concerns PHP Scripts Mall Professional Service Script. Affected component: admin/bannerview.php with the view parameter vulnerable to XSS. This is described across multiple sources as a cross-site scripting vulnerability in the Professional Service Script, enabling script execution via th...
CVE-2017-17930
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
CVE-2017-17926
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17930
The affected software is PHP Scripts Mall Professional Service Script. It contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via admin/general_settingupd.php, demonstrated by changing a setting in the user panel. The root cause and specific impact details are described across ...