691 matches found
CVE-2019-7433
PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2019-7433
CVE-2019-7433 affects PHP Scripts Mall Rental Bike Script 2.0.3 and is described as a Cross-Site Request Forgery (CSRF) via the Edit Profile feature. The NVD entry lists impact metrics (CVSS v3 base score 8.8, HIGH) with network attack vector, low attack complexity, no privileges required, and us...
CVE-2019-7432
PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...
CVE-2019-7431
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
CVE-2019-7431
CVE-2019-7431 affects PHP Scripts Mall Image Sharing Script 1.3.4. The vulnerability is a directory traversal vulnerability exploitable by a direct request to list the uploads directory, enabling access to directory contents. Public sources in the provided set corroborate a path traversal issue b...
CVE-2019-7430
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
CVE-2019-7430
The CVE-2019-7430 entry documents a vulnerability in PHP Scripts Mall Image Sharing Script 1.3.4, described as an HTML injection via the Search Bar. The affected component is the image sharing script’s Search Bar handling; root cause details are not expanded beyond the HTML injection claim in the...
CVE-2019-7429
CVE-2019-7429 affects PHP Scripts Mall Property Rental Software 2.1.4. The vulnerability is a directory traversal issue triggered by direct requests to an uploads directory listing (e.g., wp-content/uploads/2016/08), enabling access to files within the uploads path. The NVD entry documents a simp...
CVE-2019-7429
PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...
CVE-2018-20648
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...
CVE-2018-20648
CVE-2018-20648 affects PHP Scripts Mall Car Rental Script 2.0.8 with a Cross-Site Request Forgery (CSRF) vulnerability exposed via accountedit.php. The vulnerability is described as CSRF, implying an unauthenticated or authenticated-user action spoofing scenario depending on the context, with pot...
CVE-2018-20647
The CVE-2018-20647 entry concerns PHP Scripts Mall Car Rental Script 2.0.8, where a directory-traversal vulnerability exists in the handling of image directories (e.g., images/). The connected records confirm the affected product and the vulnerable component/behavior, but do not provide exploitat...
CVE-2018-20647
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...
CVE-2018-20646
The CVE-2018-20646 entry concerns PHP Scripts Mall Basic B2B Script 2.0.9, where a directory traversal vulnerability allows listing of an image directory (e.g., uploads/) via a direct request. The vulnerability targets the image directory listing functionality; CVSS metrics indicate a Network att...
CVE-2018-20646
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...
CVE-2018-20645
Summary of CVE-2018-20645 : The vulnerability affects PHP Scripts Mall Basic B2B Script 2.0.9, with HTML injection possible through the First Name or Last Name fields. The initial disclosure lists a CVSS base score of 5.4 (Medium) on CVSS 3.0 and 3.5 (Low) on CVSS 2.0, indicating a moderate impac...
CVE-2018-20645
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...
CVE-2018-20644
Technical details about CVE-2018-20644 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation.