691 matches found
CVE-2018-20629
CVE-2018-20629 affects PHP Scripts Mall Charity Donation Script (readymadeb2bscript). The issue is a directory traversal vulnerability exposed by direct requests listing an uploads directory (e.g., wp-content/uploads/2018/12). Impact is partial confidentiality exposure; no exploitation or patch d...
CVE-2018-20628
PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2018-20628
CVE-2018-20628 affects PHP Scripts Mall Charity Foundation Script versions 1–3, where a direct request to an uploads directory (e.g., wp-content/uploads/2018/12) enables directory traversal. This is caused by improper handling of directory listings, allowing access to files within the uploads pat...
CVE-2018-20627
PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...
CVE-2018-20626
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2018-20626
CVE-2018-20626 involves the PHP Scripts Mall Consumer Reviews Script 4.0.3. The connected records confirm a directory traversal vulnerability triggered by a direct request to an uploads directory (for example, wp-content/uploads/2018/12). The root cause is a traversal flaw that permits listing/po...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
Design/Logic Flaw
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
Path traversal
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
CVE-2019-9607 affects PHP Scripts Mall Medical Store Script 3.0.3 and enables Path Traversal by navigating to the parent directory of a JPG or PNG file. The NVD describes this as a Medium severity issue (CVSS v2 base 5.0; CVSS v3 base 5.3) with network access, low attack complexity, no authentica...
CVE-2019-9606
CVE-2019-9606 affects PHP Scripts Mall Personal Video Collection Script 4.0.4. The vulnerability is a Stored XSS in the Update profile feature. The available sources describe the affected product and the type of issue but do not provide detailed root cause analysis, exploit patterns, affected ver...
PHP Scripts Mall Auction website script input validation vulnerability
PHP Scripts Mall Auction website script is an online auction website system by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Auction website script version 2.0.4, which can be exploited by an attacker to modify the amount of payment...
PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability
PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...