1351 matches found
CVE-2019-7554
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
CVE-2019-7552
An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...
CVE-2019-7553
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field...
Design/Logic Flaw
An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...
Cross site scripting
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field...
CVE-2019-7552
An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...
CVE-2019-7554
The vulnerability CVE-2019-7554 affects PHP Scripts Mall API Based Travel Booking 3.4.7. It is a reflected cross-site scripting (XSS) flaw exploitable via the flight-results.php d2 parameter, which can cause client-side script execution. The issue stems from input reflected back to the user; expl...
CVE-2019-7553: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field...
CVE-2019-7553
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field...
CVE-2019-7554: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
CVE-2019-7553
CVE-2019-7553 affects PHP Scripts Mall Chartered Accountant: Auditor Website version 2.0.1, with a Stored XSS in the Profile Update page via the My Name field. Several sources (Red Hat advisory, CNVD, CVE listings, and PT-2019-18644) confirm the vulnerability type as stored XSS and point to the s...
PT-2019-18643
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Investment MLM Software version 2.0.2 Description An issue was discovered due to a lack of sanitization in the Edit Name section of the My Profile Section, leading to stored XSS. Recommendations For PHP Scripts Mall Investment...
CVE-2019-7552: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...
PHP Scripts Mall Amazon Affiliate Store Input Validation Error Vulnerability
PHP Scripts Mall Amazon Affiliate Store is an online e-store system by PHP Scripts Mall India. An input validation error vulnerability exists in PHP Scripts Mall Amazon Affiliate Store version 2.1.6, which can be exploited by attackers to tamper with payment amounts...
CVE-2019-9605
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
Cross site scripting
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
CVE-2019-9604
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...
CVE-2019-9604: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...
CVE-2019-9605: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...