CVE-2019-9062: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

CVE-2019-9066: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

CVE-2019-9065: Undefined Security Weakness

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9063: Undefined Security Weakness

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

The CVE-2019-8361 vulnerability affects PHP Scripts Mall’s Responsive Video News Script, where an XSS flaw in the Search Bar could enable HTML injection or URL redirection. Public details describe the vulnerability but do not provide exploit code, affected versions, or explicit remediation in the...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

Cross site scripting

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

CVE-2019-6248 affects PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1. The connected sources consistently describe a Reflected XSS vulnerability triggered via the srch parameter, demonstrated by the restaurants-details.php endpoint. The vulnerability arises in user-supplied...

CVE-2019-6248: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

Design/Logic Flaw

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...

CVE-2019-6126: Direct Request

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...

PHP Scripts Mall Website Seller Script Cross-Site Scripting Vulnerability (CNVD-2019-21121)

PHP Scripts Mall Website Seller Script is an e-commerce website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Website Seller Script version 2.0.5, which can be exploited by remote attackers to inject arbitrary web script or HTML via the...

CVE-2018-20530

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

CVE-2018-20530

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

Design/Logic Flaw

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

CVE-2018-20530

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

CVE-2018-20530: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

PT-2018-15415

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Website Seller Script version 2.0.5 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It can be triggered via a Profile field, such as the Company Address. Recommendations For PHP Scripts Mall Websi...