1351 matches found
CVE-2018-20628: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2019-7429: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...
CVE-2018-20644: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...
CVE-2018-20641: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20629: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2018-20642: Improper Restriction of Operations within the Bounds of a Memory Buffer
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...
CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...
CVE-2019-7433: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20626: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
CVE-2019-7435: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...
CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...
CVE-2018-20648: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...
CVE-2018-20639: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...
CVE-2018-20640: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...
Netartmedia PHP Mall 4.1 SQL Injection
Exploit Title: Netartmedia PHP Mall 4.1 - Multiple SQL Injection Date: 19.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.netartmedia.net/mall/ Demo Site: https://www.phpscriptdemos.com/mall/ Version: 4.1 Tested on: Kali Linux CVE: N/A Description: PHP Mall is one of the...
