Cross site request forgery (csrf)

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

Cross site request forgery (csrf)

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

Cross site request forgery (csrf)

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

PHP Scripts Mall Entrepreneur Job Portal Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...

PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...

CVE-2019-7433

CVE-2019-7433 affects PHP Scripts Mall Rental Bike Script 2.0.3 and is described as a Cross-Site Request Forgery (CSRF) via the Edit Profile feature. The NVD entry lists impact metrics (CVSS v3 base score 8.8, HIGH) with network attack vector, low attack complexity, no privileges required, and us...

CVE-2019-7433

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20644

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20641

The CVE-2018-20641 entry concerns PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 and documents a Cross-Site Request Forgery (CSRF) affecting the Edit Profile feature. The connected records corroborate that the vulnerability is CSRF, with CVSS metrics indicating a high impact (CVSSv3 base s...

CVE-2018-18382

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" aka user/edit-profile action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name field in the edit profile page...

CVE-2018-14922

Multiple cross-site scripting XSS vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name field in the edit profile page...

CVE-2018-14922

Multiple cross-site scripting XSS vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 first name or 2 last name field in the edit profile page...

CVE-2018-14922

CVE-2018-14922 : Monstra CMS 3.0.4 contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the first name or last name fields on the profile edit page. The issue is documented across multiple sources (NVD entry and OSVDB/CVE ...

PHP Scripts Mall advanced-real-estate-script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall advanced-real-estate-script is a PHP and MySQL based real estate website system script by PHP Scripts Mall India. A cross-site request forgery vulnerability exists in PHP Scripts Mall advanced-real-estate-script version 4.0.9. A remote attacker can exploit this vulnerability to...

Cross site request forgery (csrf)

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

Monstra-Dev 3.0.4 Cross Site Scripting

Exploit Title:Monstra-Dev 3.0.4 Stored Cross Site Scripting Date: 04-08-2018 Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Software Link: https://github.com/monstra-cms/monstra Published In- https://indiancybersecuritysolutions.com/cve-2018-14922-cross-site-scripting/ Product...