Lucene search
+L

827 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•8 views

CVE-2018-20645: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

5.4CVSS5.8AI score0.00653EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20634: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...

6.5CVSS5.8AI score0.01581EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•4 views

CVE-2019-7429: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...

6.5CVSS5.8AI score0.01366EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•5 views

CVE-2018-20638: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

6.5CVSS5.7AI score0.01425EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•5 views

CVE-2019-7430: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

5.3CVSS5.8AI score0.01043EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20630: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

5.3CVSS5.8AI score0.01853EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20647: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...

6.5CVSS5.7AI score0.01855EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•5 views

CVE-2018-20629: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

5.3CVSS5.8AI score0.01853EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20628: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

7.5CVSS5.8AI score0.0218EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•5 views

CVE-2018-20644: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

8.8CVSS5.8AI score0.0065EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•7 views

CVE-2018-20641: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

8.8CVSS5.8AI score0.00636EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•7 views

CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

6.5CVSS5.7AI score0.01366EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•7 views

CVE-2018-20626: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

6.5CVSS5.8AI score0.01637EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

4.3CVSS5.7AI score0.01321EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

6.5CVSS5.7AI score0.01637EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•6 views

CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

6.5CVSS5.7AI score0.01366EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•7 views

CVE-2018-20648: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...

8.8CVSS5.7AI score0.00636EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•9 views

CVE-2018-20640: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...

5.4CVSS5.8AI score0.00653EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•7 views

CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...

6.5CVSS5.7AI score0.01637EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/20 12:00 a.m.•5 views

CVE-2019-7433: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

8.8CVSS5.8AI score0.00636EPSS
SaveExploits1References2
Rows per page
Query Builder