827 matches found
CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...
CVE-2019-7435: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...
CVE-2018-20639: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...
Design/Logic Flaw
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
Path traversal
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606
CVE-2019-9606 affects PHP Scripts Mall Personal Video Collection Script 4.0.4. The vulnerability is a Stored XSS in the Update profile feature. The available sources describe the affected product and the type of issue but do not provide detailed root cause analysis, exploit patterns, affected ver...
CVE-2019-9607
CVE-2019-9607 affects PHP Scripts Mall Medical Store Script 3.0.3 and enables Path Traversal by navigating to the parent directory of a JPG or PNG file. The NVD describes this as a Medium severity issue (CVSS v2 base 5.0; CVSS v3 base 5.3) with network access, low attack complexity, no authentica...
CVE-2019-9607: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
PHP Scripts Mall Auction website script input validation vulnerability
PHP Scripts Mall Auction website script is an online auction website system by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Auction website script version 2.0.4, which can be exploited by an attacker to modify the amount of payment...
PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability
PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...
Directory traversal
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9065
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...