CVE-2018-20642

CVE-2018-20642 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. The vulnerability is triggered by crafted JavaScript in the KeySkills field, causing a denial of service (outage of profile editing). Documents confirm the affected product and root cause (malformed input in KeySkills) ...

CVE-2018-20642

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20641

The CVE-2018-20641 entry concerns PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 and documents a Cross-Site Request Forgery (CSRF) affecting the Edit Profile feature. The connected records corroborate that the vulnerability is CSRF, with CVSS metrics indicating a high impact (CVSSv3 base s...

CVE-2018-20640

The vulnerability described for CVE-2018-20640 affects the PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. It is a stored Cross-Site Scripting (XSS) vulnerability triggered via the Full Name field, as indicated across multiple sources (NVD entry and mirrored records). The root cause detail...

CVE-2018-20640

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...

CVE-2018-20639

CVE-2018-20639 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, with an HTML injection vulnerability exploitable via the Search Bar. The connected sources consistently describe HTML injection in this product edition and do not provide specific exploit code, versions beyond 3.0.1, or...

CVE-2018-20639

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20638

CVE-2018-20638 affects PHP Scripts Mall Chartered Accountant: Auditor Website 2.0.1 and describes a directory traversal vulnerability that allows a direct request to list files in an image directory (e.g., assets/). The connected documents corroborate a path disclosure via directory listing; no e...

CVE-2018-20638

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20637

CVE-2018-20637 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability allows remote attackers to cause a denial of service (unrecoverable blank profile) by sending crafted JavaScript in the First Name and Last Name fields. Documented impact per CVSS metrics shows...

CVE-2018-20636

CVE-2018-20636 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability is HTML injection via the First Name field. Public references confirm the product/version and injection class; CVSS v3.0 base score is 5.4 (MEDIUM) with network access and user interaction requ...

CVE-2018-20636

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20635

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20634

CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20632

CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...

CVE-2018-20630

CVE-2018-20630 affects PHP Scripts Mall Advance Crowdfunding Script 2.0.3. The vulnerability is a directory traversal issue that allows direct requests to an uploads directory (e.g., wp-content/uploads/2018/12) to enumerate files. The available sources consistently identify this as a path travers...

CVE-2018-20630

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20629

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...