954 matches found
CVE-2018-20626: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9606
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
Design/Logic Flaw
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
Path traversal
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9607
CVE-2019-9607 affects PHP Scripts Mall Medical Store Script 3.0.3 and enables Path Traversal by navigating to the parent directory of a JPG or PNG file. The NVD describes this as a Medium severity issue (CVSS v2 base 5.0; CVSS v3 base 5.3) with network access, low attack complexity, no authentica...
CVE-2019-9606
CVE-2019-9606 affects PHP Scripts Mall Personal Video Collection Script 4.0.4. The vulnerability is a Stored XSS in the Update profile feature. The available sources describe the affected product and the type of issue but do not provide detailed root cause analysis, exploit patterns, affected ver...
PT-2019-19745
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Personal Video Collection Script version 4.0.4 Description The issue is related to Stored XSS, which occurs via the "Update profile" feature. Recommendations For version 4.0.4, update to a newer version that contains a fix for...
PT-2019-19746
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Medical Store Script version 3.0.3 Description The issue allows path traversal by navigating to the parent directory of a jpg or png file. Recommendations For PHP Scripts Mall Medical Store Script version 3.0.3, update to a...
CVE-2019-9607: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file...
CVE-2019-9606: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...
PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability
PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...
PHP Scripts Mall Auction website script input validation vulnerability
PHP Scripts Mall Auction website script is an online auction website system by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Auction website script version 2.0.4, which can be exploited by an attacker to modify the amount of payment...
CVE-2019-9065
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...
CVE-2019-9063
PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...