38 matches found
EUVD-2018-18543
Malware in sbrugna...
EUVD-2017-8756
Malware in sbrugna...
EUVD-2019-15693
Malware in sbrugna...
EUVD-2018-18121
Malware in sbrugna...
CVE-2019-6126
The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...
Design/Logic Flaw
The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...
PT-2019-17966
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php",...
CVE-2019-6126: Direct Request
The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...
CVE-2018-6796
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
CVE-2018-6796
CVE-2018-6796 affects the PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0. The connected CNVD/CNVD entries describe a Stored XSS vulnerability that can be triggered via arbitrary input fields on user profiles. The root cause is input fields not properly sanitizing or encoding data, allo...
CVE-2018-6796
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting
Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...
CVE-2018-6796: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
PT-2018-17750
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of user...
Sql injection
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...
CVE-2018-6364
Vulnerability : Multilanguage Real Estate MLM Script (3.0 and earlier) has an SQL injection in the srch parameter of /product-list.php . Multiple sources (CNVD/NVD) describe remote, unauthenticated exploitation with high impact to confidentiality, integrity, and availability. CVSSv3.0 base score ...
PT-2018-17507
Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0 Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter. Recommendations For versions prior to 3.0, update to versi...
CVE-2018-6364: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...
PHP Scripts Mall Affiliate MLM Script SQL Injection Vulnerability
PHP Scripts Mall Affiliate MLM Script is a set of PHP based product distribution, affiliate website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Affiliate MLM Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'key'...