2059 matches found
CVE-2018-20635
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2018-20633
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20632
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
CVE-2018-20632
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
CVE-2018-20633
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20634
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
Code injection
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
Directory traversal
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...
Cross site scripting
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
Design/Logic Flaw
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...
PHP Scripts Mall Advance B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the FIRST NAME or LAST NAME field...
PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...
CVE-2018-20646
The CVE-2018-20646 entry concerns PHP Scripts Mall Basic B2B Script 2.0.9, where a directory traversal vulnerability allows listing of an image directory (e.g., uploads/) via a direct request. The vulnerability targets the image directory listing functionality; CVSS metrics indicate a Network att...
CVE-2018-20645
Summary of CVE-2018-20645 : The vulnerability affects PHP Scripts Mall Basic B2B Script 2.0.9, with HTML injection possible through the First Name or Last Name fields. The initial disclosure lists a CVSS base score of 5.4 (Medium) on CVSS 3.0 and 3.5 (Low) on CVSS 2.0, indicating a moderate impac...
CVE-2018-20644
Technical details about CVE-2018-20644 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation.
CVE-2018-20635
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2018-20635
CVE-2018-20635 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a directory traversal flaw triggered by a direct request to list an image directory (e.g., assets/), which could allow access to arbitrary files on the server. Exploitation details are not provided in the suppl...
CVE-2018-20634
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
CVE-2018-20634
CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...