CVE-2018-20644

Technical details about CVE-2018-20644 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation.

CVE-2018-20644

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

CVE-2018-20643

The CVE-2018-20643 entry concerns PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, where a directory traversal vulnerability exists via direct requests to an image directory listing (e.g., assets/). The root cause is improper directory access handling that enables traversal to view sensitiv...

CVE-2018-20643

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20642

CVE-2018-20642 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. The vulnerability is triggered by crafted JavaScript in the KeySkills field, causing a denial of service (outage of profile editing). Documents confirm the affected product and root cause (malformed input in KeySkills) ...

CVE-2018-20642

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20641

The CVE-2018-20641 entry concerns PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 and documents a Cross-Site Request Forgery (CSRF) affecting the Edit Profile feature. The connected records corroborate that the vulnerability is CSRF, with CVSS metrics indicating a high impact (CVSSv3 base s...

CVE-2018-20640

The vulnerability described for CVE-2018-20640 affects the PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1. It is a stored Cross-Site Scripting (XSS) vulnerability triggered via the Full Name field, as indicated across multiple sources (NVD entry and mirrored records). The root cause detail...

CVE-2018-20640

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...

CVE-2018-20639

CVE-2018-20639 affects PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1, with an HTML injection vulnerability exploitable via the Search Bar. The connected sources consistently describe HTML injection in this product edition and do not provide specific exploit code, versions beyond 3.0.1, or...

CVE-2018-20639

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20638

CVE-2018-20638 affects PHP Scripts Mall Chartered Accountant: Auditor Website 2.0.1 and describes a directory traversal vulnerability that allows a direct request to list files in an image directory (e.g., assets/). The connected documents corroborate a path disclosure via directory listing; no e...

CVE-2018-20638

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20637

CVE-2018-20637 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability allows remote attackers to cause a denial of service (unrecoverable blank profile) by sending crafted JavaScript in the First Name and Last Name fields. Documented impact per CVSS metrics shows...

CVE-2018-20636

CVE-2018-20636 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability is HTML injection via the First Name field. Public references confirm the product/version and injection class; CVSS v3.0 base score is 5.4 (MEDIUM) with network access and user interaction requ...

CVE-2018-20636

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20635

CVE-2018-20635 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a directory traversal flaw triggered by a direct request to list an image directory (e.g., assets/), which could allow access to arbitrary files on the server. Exploitation details are not provided in the suppl...

CVE-2018-20635

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20634

CVE-2018-20634 affects PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability allows a remote attacker to cause a denial of service by injecting JavaScript in the First Name field, leading to a changed page structure. The available documents do not provide the exploited vectors beyond this ...