1912 matches found
Design/Logic Flaw
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...
Path traversal
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...
Cross site scripting
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting XSS via the FIRST NAME or LAST NAME field...
Directory traversal
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...
Directory traversal
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
Code injection
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service unrecoverable blank profile via crafted JavaScript code in the First Name and Last Name field...
Directory traversal
PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
Directory traversal
PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
Cross site request forgery (csrf)
PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...
PHP Scripts Mall Classified Ads Script Directory Traversal Vulnerability
PHP Scripts Mall Classified Ads Script is a classified ads script. A directory traversal vulnerability exists in PHP Scripts Mall Classified Ads Script 3.2.2. This vulnerability can be exploited to achieve directory traversal by directly requesting an uploaded directory listing...
PHP Scripts Mall Advance B2B Script Directory Traversal Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a directory traversal vulnerability, which can be exploited to achieve directory traversal by directly requesting an image...
PHP Scripts Mall Entrepreneur Job Portal Script HTML Injection Vulnerability
PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 suffers from an HTML injection vulnerability, which can be exploited by an attacker via the search bar to achieve HTML injection...
PHP Scripts Mall Entrepreneur Job Portal Script Directory Traversal Vulnerability
PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. A directory traversal vulnerability exists in PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, which can be exploited to achieve directory traversal by directly requesting an image...
PHP Scripts Mall Classified Ads Script Reflective HTML Injection Vulnerability
PHP Scripts Mall Classified Ads Script is a classified ads script. PHP Scripts Mall Classified Ads Script 3.2.2 suffers from a reflected HTML injection vulnerability. An attacker can exploit this vulnerability to perform HTML injection via a search form...
PHP Scripts Mall Advance B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the FIRST NAME or LAST NAME field...
PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...
CVE-2019-7437
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
CVE-2019-7437
CVE-2019-7437 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2 and is a reflected Cross-Site Scripting (XSS) vulnerability triggered via the Search field. The connected sources consistently describe the issue as a reflected XSS flaw in the search input, with no additional details o...
CVE-2019-7436
CVE-2019-7436 affects the PHP Scripts Mall Opensource Classified Ads Script version 3.2.2, with a vulnerability in the uploads directory handling that enables a directory traversal by directly requesting a listing of the uploads directory. The root cause is improper access control for the uploads...