Cross site scripting

PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541...

CVE-2018-20138: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541...

PT-2018-15266

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Entrepreneur B2B Script version 3.0.6 Description The issue allows for Stored XSS attacks through certain fields in the Account Settings, such as FirstName and LastName. This is similar to a previously identified issue...

Authentication flaw

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2018-16455

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

CVE-2018-16456

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...

CVE-2018-16457

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...

Cross site scripting

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

CVE-2018-16326

PHP Scripts Mall Olx Clone 3.4.2 has XSS...

CVE-2018-16453

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

Cross site scripting

PHP Scripts Mall Olx Clone 3.4.2 has XSS...

CVE-2018-16457

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...

CVE-2018-16456

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...

CVE-2018-16326

PHP Scripts Mall Olx Clone 3.4.2 has XSS...

CVE-2018-16455

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

CVE-2018-16457

The CVE-2018-16457 issue affects PHP Scripts Mall Open Source Real-Estate Script 3.6.2, where the web application allows remote attackers to list files in wp-content/themes/template_dp_dec2015/img. Root cause is directory listing enabled for the theme directory, enabling enumeration of its conten...

CVE-2018-16453

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

CVE-2018-16453: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

PT-2018-13581 · Php Scripts Mall · Php Scripts Mall Website Seller Script

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Website Seller Script version 2.0.5 Description: The issue concerns a cross-site scripting XSS problem. XSS is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website, potentiall...