CVE-2019-9063

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

Cross site request forgery (csrf)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

CVE-2019-9064

The CVE-2019-9064 entry corresponds to a directory traversal flaw in PHP Scripts Mall Cab Booking Script 1.0.3. Multiple connected sources (CNVD, CVE records, PRION, NVD) describe that an attacker can traverse directories to reach the parent directory of a jpg or png file, exposing directory stru...

CVE-2019-9066

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

CVE-2019-9063

The CVE-2019-9063 entry concerns PHP Scripts Mall Auction website script version 2.0.4, where an input validation vulnerability allows parameter tampering of the payment amount. Connected CNVD/NVD records describe an input validation flaw enabling modification of the donation/paid amount; exploit...

CVE-2019-9066

The CVE-2019-9066 entry concerns PHP Scripts Mall PHP Appointment Booking Script 3.0.3, with a vulnerability described as HTML injection in the user profile page. Multiple connected sources (NVD entry and CNVD description) confirm the affected software and the form of the issue. The root cause is...

CVE-2019-9062

The CVE-2019-9062 entry concerns PHP Scripts Mall Online Food Ordering Script version 1.0, where a Cross-Site Request Forgery (CSRF) exists in my-account.php. The available connected documents corroborate a CSRF vulnerability in that file, enabling unauthorized state-changing requests. PT-2019-19...

CVE-2019-9062

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

CVE-2019-9064

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9065

CVE-2019-9065 affects PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1. The connected CNVD/NVD records describe an input validation vulnerability that enables parameter tampering of the payment amount, allowing an attacker to alter the charged value. The issue stems from insufficient valida...

Design/Logic Flaw

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

The CVE-2019-8361 vulnerability affects PHP Scripts Mall’s Responsive Video News Script, where an XSS flaw in the Search Bar could enable HTML injection or URL redirection. Public details describe the vulnerability but do not provide exploit code, affected versions, or explicit remediation in the...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

Cross site scripting

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

CVE-2019-6248 affects PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1. The connected sources consistently describe a Reflected XSS vulnerability triggered via the srch parameter, demonstrated by the restaurants-details.php endpoint. The vulnerability arises in user-supplied...

CVE-2019-6126

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...

Design/Logic Flaw

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...