CVE-2017-17908

The CVE-2017-17908 entry concerns PHP Scripts Mall’s Responsive Realestate Script, which has a Cross-Site Request Forgery (CSRF) via the admin/general path. The vulnerability is documented across multiple sources (NVD, CNVD, CVE listing) with CSRF described as enabling an attacker to induce state...

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...

PHP Scripts Mall Readymade Video Sharing Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script. A remote attacker can use the user-profile-edit.php file to...

PHP Scripts Mall Readymade Video Sharing Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script. A remote attacker can send a 'search' parameter to the...

PHP Scripts Mall Readymade Job Site Script Cross Site Request Forgery Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A...

PHP Scripts Mall Readymade Job Site Script SQL Injection Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A SQL injection vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote attacker...

PT-2017-15089

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a CSRF vulnerability via the "admin/sitesettings.php" endpoint. This means an attacker could potentially manipulate site settings without proper...

PT-2017-15090

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the carid parameter in the "admin/carlistedit.php" API endpoint. This allows for potential exploitation...

PT-2017-15093

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Realestate Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the gplu...

PT-2017-15092

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Realestate Script affected versions not specified Description The issue concerns a CSRF vulnerability. It affects the admin/general section, allowing for potential unauthorized actions. Recommendations At the moment...

PT-2017-15091

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the carid parameter in the "admin/areaedit.php" endpoint...

PHP Scripts Mall Affiliate MLM Script SQL Injection Vulnerability

PHP Scripts Mall Affiliate MLM Script is a set of PHP based product distribution, affiliate website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Affiliate MLM Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'key'...

PHP Scripts Mall Basic B2B Script SQL Injection Vulnerability

PHP Scripts Mall Basic B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.8. A remote attacker can exploit the vulnerability by sending the 'id'...

PHP Scripts Mall Responsive Events And Movie Ticket Booking Script SQL Injection Vulnerability

PHP Scripts Mall Responsive Events And Movie Ticket Booking Script is a PHP based online movie ticket booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Events And Movie Ticket Booking Script version 3.2.1. The vulnerability can be...

PHP Scripts Mall Opensource Classified Ads Script SQL Injection Vulnerability

PHP Scripts Mall Opensource Classified Ads Script is a set of PHP based classifieds posting website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Opensource Classified Ads Script version 3.2. A remote attacker can exploit this vulnerability by sending...

PHP Scripts Mall MLM Forced Matrix SQL Injection Vulnerability

PHP Scripts Mall MLM Forced Matrix is a set of PHP based online marketing website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall MLM Forced Matrix version 2.0.9. A remote attacker can exploit the vulnerability by sending the 'newid' parameter to the...

PHP Scripts Mall Muslim Matrimonial Script SQL Injection Vulnerability

PHP Scripts Mall Muslim Matrimonial Script is a set of PHP-based scripts for Muslim-oriented matrimonial websites by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script version 3.02. A remote attacker can exploit the vulnerability by sending...

PHP Scripts Mall Readymade Video Sharing Script SQL Injection Vulnerability

PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script version 3.2. The vulnerability can be exploited by a remote attacker to...

PHP Scripts Mall MLM Forex Market Plan Script SQL Injection Vulnerability

PHP Scripts Mall MLM Forex Market Plan Script is a PHP based online distribution website script from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall MLM Forex Market Plan Script version 2.0.4. The vulnerability can be exploited by a remote attacker to inject SQL...