CVE-2017-17924

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/reviewuserwise.php...

CVE-2017-17908

PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...

CVE-2017-17909

PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17927

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...

CVE-2017-17905

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

Sql injection

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

Cross site request forgery (csrf)

PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...

Code injection

PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...

Sql injection

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...

Code injection

PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...

Cross site request forgery (csrf)

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

Cross site request forgery (csrf)

PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...

Code injection

PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...

Sql injection

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

Code injection

PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

Design/Logic Flaw

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/reviewuserwise.php...

Design/Logic Flaw

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17926

PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

CVE-2017-17929

The CVE concerns PHP Scripts Mall Professional Service Script. Affected component: admin/bannerview.php with the view parameter vulnerable to XSS. This is described across multiple sources as a cross-site scripting vulnerability in the Professional Service Script, enabling script execution via th...