CVE-2018-20634

PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20633

CVE-2018-20633 affects PHP Scripts Mall Advance B2B Script 2.1.4, with a Cross-Site Request Forgery (CSRF) vulnerability exposed via the Edit Profile feature. The connected records consistently identify the vulnerable component as the Advance B2B Script 2.1.4 and describe the issue as CSRF via Ed...

CVE-2018-20632

CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...

CVE-2018-20632

PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...

PT-2019-10129

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...

PT-2019-10142

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...

CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...

PT-2019-10128

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the FIRST NAME or LAST NAME field. Recommendations: For PHP Scripts Mall Advance B2B Script version...

PT-2019-10141

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit profile feature. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider implementing proper...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...

CVE-2018-20633: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20634: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...

CVE-2018-20645: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20632: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...

CVE-2018-20644: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...

PT-2019-10130

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...

CVE-2019-4027

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceI...