EUVD-2019-16974

Malware in sbrugna...

EUVD-2019-16976

Malware in sbrugna...

EUVD-2019-16975

Malware in sbrugna...

CVE-2019-7434

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7433

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

CVE-2019-7434

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...

Directory traversal

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...

Cross site request forgery (csrf)

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7434

This CVE affects PHP Scripts Mall Rental Bike Script 2.0.3, where a directory traversal flaw allows listing of an uploads directory via a direct request. The root cause is improper validation of file paths, enabling access to sensitive upload contents. The connected documents confirm the same iss...

CVE-2019-7433

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7433

CVE-2019-7433 affects PHP Scripts Mall Rental Bike Script 2.0.3 and is described as a Cross-Site Request Forgery (CSRF) via the Edit Profile feature. The NVD entry lists impact metrics (CVSS v3 base score 8.8, HIGH) with network attack vector, low attack complexity, no privileges required, and us...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...