28 matches found
EUVD-2017-8760
Malware in sbrugna...
CVE-2018-20633
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20634
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
CVE-2018-20632
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
CVE-2018-20635
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
Cross site scripting
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...
PHP Scripts Mall Advance B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the FIRST NAME or LAST NAME field...
CVE-2018-20634
CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...
CVE-2018-20632
CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...
PT-2019-10129
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...
CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2018-20634: Improper Restriction of Operations within the Bounds of a Memory Buffer
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
PT-2019-10128
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the FIRST NAME or LAST NAME field. Recommendations: For PHP Scripts Mall Advance B2B Script version...
PT-2019-10131
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...
PT-2019-10130
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...
CVE-2018-20633: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20632: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
PHP Scripts Mall Advance B2B Script SQL Injection Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advance B2B Script version 2.1.3. A remote attacker can exploit this vulnerability by sending the...