2363 matches found
CVE-2017-17982
The Muslim Matrimonial Script by PHP Scripts Mall is affected by a Cross-Site Request Forgery (CSRF) vulnerability via admin/subadmin_edit.php. Multiple sources (NVD, CNVD, PRION/CVELIST) corroborate CSRF on that endpoint. No concrete exploitation details, patch/version fixes, or explicit remedia...
CVE-2017-17984
The CVE-2017-17984 entry concerns PHP Scripts Mall’s Muslim Matrimonial Script, which is reported to have a Cross-Site Scripting (XSS) vulnerability via the admin/event_edit.php edit_id parameter. Connected sources (CNVD-2018-01242 and NVD) confirm an XSS flaw in this script; the vulnerability af...
CVE-2017-17982
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...
CVE-2017-17981
The CVE-2017-17981 entry applies to PHP Scripts Mall Muslim Matrimonial Script, where an XSS vulnerability exists via the admin/slider_edit.php edit_id parameter. The issue is documented across multiple sources (e.g., CNVD/CVE/NVD references) as a cross-site scripting flaw related to that paramet...
CVE-2017-17986
CVE-2017-17986 affects PHP Scripts Mall Muslim Matrimonial Script, with a cross-site scripting vulnerability exposed via the admin/caste_view.php comm_id parameter. The connected CNVD and NVD records confirm the issue as XSS; no active exploit status or concrete remediation is provided in the sup...
CVE-2017-17988
The CVE-2017-17988 entry concerns PHP Scripts Mall Muslim Matrimonial Script, where a cross-site scripting vulnerability exists in the admin/event_add.php event_title parameter. The connected CNVD/NVD entries corroborate XSS existence via that parameter, indicating the vulnerability is centered o...
CVE-2017-17985
The Muslim Matrimonial Script from PHP Scripts Mall is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the admin/state_view.php cou_id parameter. Multiple sources (NVD entry CVE-2017-17985, CNVD-2018-01241) confirm XSS through this parameter, indicating input is not properly sa...
CVE-2017-17988
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...
CVE-2017-17987
CVE-2017-17987 affects PHP Scripts Mall’s Muslim Matrimonial Script. The vulnerability is an arbitrary file upload via admin/mydetails_edit.php , enabling upload of unrestricted files. Connected CNVD entry corroborates the arbitrary file upload issue. No exploit specifics or remediation details a...
CVE-2017-17983
The PHP Scripts Mall Muslim Matrimonial Script is affected by an SQL injection in view-profile.php mem_id parameter. Root cause: unsafe SQL construction from user-supplied mem_id. Documented impact in CVSS: High (confidentiality, integrity, and availability). CVSS3 base score: 8.8. No remediation...
CVE-2017-17981
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17987
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...
CVE-2017-17983
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...
CVE-2017-17984
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...
CVE-2017-17985
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...
CVE-2017-17986
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...
PT-2017-15137
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is with the edit id parameter in the "admin/slider...
PT-2017-15143
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue allows for arbitrary file upload via the admin/mydetails edit.php API endpoint. This could potentially lead to unauthorized access or malicious...
CVE-2017-17987: Unrestricted Upload of File with Dangerous Type
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...
CVE-2017-17988: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...