CVE-2017-17930

The affected software is PHP Scripts Mall Professional Service Script. It contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via admin/general_settingupd.php, demonstrated by changing a setting in the user panel. The root cause and specific impact details are described across ...

CVE-2017-17931

CVE-2017-17931 affects PHP Scripts Mall Resume Clone Script. A SQL Injection via forget.php username parameter allows a remote attacker to obtain user/sensitive data. CNVDise and NVD corroborate the vulnerability; remediation/details on patches are not provided in the documents.

CVE-2017-17928

The CVE-2017-17928 entry concerns PHP Scripts Mall Professional Service Script. It describes an SQL injection vulnerability in the admin/review.php endpoint triggered via the id parameter, allowing an attacker to manipulate queries. Connected CNVD/NVD records corroborate a SQL injection vulnerabi...

PHP Scripts Mall Responsive Realestate Script Cross-Site Request Forgery Vulnerability

Responsive Realestate Script is a script for building real estate websites. A cross-site request forgery vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can exploit this vulnerability by using admin/general to trick users into injecting web script or HTML,...

PHP Scripts Mall Responsive Realestate Script Cross-Site Scripting Vulnerability

Responsive Realestate Script is a script for building real estate websites. A cross-site scripting vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can inject arbitrary web script or HTML by sending the 'gplus' parameter to the admin/general.php file...

PT-2017-15105

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to SQL injection, which occurs via the id parameter in the "admin/review.php" API endpoint. Recommendations At the moment, there is n...

PT-2017-15104

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This can be achieved by sending a crafted PATH INFO to the...

PT-2017-15101

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This is achieved by exploiting the id parameter in the "admin/review...

PT-2017-15103

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to register with an invalid or spoofed e-mail address due to a predictable registration URL. Recommendations At the...

PT-2017-15106

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is exploited through the view parameter in the...

PT-2017-15107

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue concerns a CSRF problem via the "admin/general settingupd.php" endpoint, which can be exploited to modify settings in the user panel...

PT-2017-15108

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Resume Clone Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the username parameter in the forget.php file. This allows for potential exploitation. Recommendations At...

PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

CVE-2017-17905

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

CVE-2017-17906

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

CVE-2017-17908

PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...

CVE-2017-17909

PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...

CVE-2017-17905

Vulnerability: CVE-2017-17905 in PHP Scripts Mall Car Rental Script exhibits a Cross-Site Request Forgery (CSRF) through admin/sitesettings.php. Root cause: CSRF flaw allowing unauthorized state-changing requests via the affected admin interface. Impact (as stated): partial to high confidentialit...

CVE-2017-17906

PHP Scripts Mall Car Rental Script suffers an SQL Injection vulnerability in the admin/carlistedit.php carid parameter. The issue allows backend database manipulation, with high impact on confidentiality, integrity, and availability (CVSS v3.0 9.8). No remediation details are provided in the supp...

CVE-2017-17907

CVE-2017-17907 affects PHP Scripts Mall Car Rental Script and is an XSS vulnerability exploitable via the admin/areaedit.php?carid parameter or admin/sitesettings.php?websitename parameter. Public records describe reflected/stored XSS vectors in these parameters, enabling injecting HTML/JS conten...