CVE-2018-20636

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20635

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20634

CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20632

CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...

CVE-2018-20630

CVE-2018-20630 affects PHP Scripts Mall Advance Crowdfunding Script 2.0.3. The vulnerability is a directory traversal issue that allows direct requests to an uploads directory (e.g., wp-content/uploads/2018/12) to enumerate files. The available sources consistently identify this as a path travers...

CVE-2018-20630

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20629

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20629

CVE-2018-20629 affects PHP Scripts Mall Charity Donation Script (readymadeb2bscript). The issue is a directory traversal vulnerability exposed by direct requests listing an uploads directory (e.g., wp-content/uploads/2018/12). Impact is partial confidentiality exposure; no exploitation or patch d...

CVE-2018-20628

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20628

CVE-2018-20628 affects PHP Scripts Mall Charity Foundation Script versions 1–3, where a direct request to an uploads directory (e.g., wp-content/uploads/2018/12) enables directory traversal. This is caused by improper handling of directory listings, allowing access to files within the uploads pat...

CVE-2018-20627

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

CVE-2018-20626

PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20626

CVE-2018-20626 involves the PHP Scripts Mall Consumer Reviews Script 4.0.3. The connected records confirm a directory traversal vulnerability triggered by a direct request to an uploads directory (for example, wp-content/uploads/2018/12). The root cause is a traversal flaw that permits listing/po...

CVE-2018-20636: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20633: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7437: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...

CVE-2018-20637: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service unrecoverable blank profile via crafted JavaScript code in the First Name and Last Name field...

CVE-2018-20627: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

CVE-2018-20631: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...