CVE-2018-16457

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...

CVE-2018-16457

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...

CVE-2018-16457

The CVE-2018-16457 issue affects PHP Scripts Mall Open Source Real-Estate Script 3.6.2, where the web application allows remote attackers to list files in wp-content/themes/template_dp_dec2015/img. Root cause is directory listing enabled for the theme directory, enabling enumeration of its conten...

CVE-2018-16457: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...

PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability

PHP Scripts Mall advanced-real-estate-script is a PHP and MySQL based real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall advanced-real-estate-script, which can be exploited by remote attackers to inject HTML code via the Na...

PHP Scripts Mall advanced-real-estate-script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall advanced-real-estate-script is a PHP and MySQL based real estate website system script by PHP Scripts Mall India. A cross-site request forgery vulnerability exists in PHP Scripts Mall advanced-real-estate-script version 4.0.9. A remote attacker can exploit this vulnerability to...

PHP Scripts Mall advanced-real-estate-script Denial of Service Vulnerability

PHP Scripts Mall advanced-real-estate-script is a PHP and MySQL based real estate website system script by PHP Scripts Mall India. A denial of service vulnerability exists in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability can be exploited by a remote attacker to cau...

CVE-2018-15189

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

Cross site request forgery (csrf)

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

Design/Logic Flaw

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15188

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15189

The CVE-2018-15189 issue affects PHP Scripts Mall advanced-real-estate-script, with a cross-site scripting (XSS) vulnerability exploitable via the Name field in a user profile. The root cause is insufficient input handling/sanitization of the Name field, enabling HTML injection. Public references...

CVE-2018-15188

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

CVE-2018-15188: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

CVE-2018-15189: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

PT-2018-12935

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue allows remote attackers to cause a denial of service, resulting in page structure loss, by injecting crafted JavaScript code into the Name field of a user profile...

PT-2018-12934

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a CSRF vulnerability. It affects the "edit-profile.php" endpoint. Recommendations For version 4.0.9, consider implementing proper CSRF protection...

PT-2018-12936

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...