CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

Cross site scripting

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

CVE-2018-6796

CVE-2018-6796 affects the PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0. The connected CNVD/CNVD entries describe a Stored XSS vulnerability that can be triggered via arbitrary input fields on user profiles. The root cause is input fields not properly sanitizing or encoding data, allo...

Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting

Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

CVE-2018-6796: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

PT-2018-17750

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0 Description The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of user...

PHP Scripts Mall Multilanguage Real Estate MLM Script SQL Injection Vulnerability

Multilanguage Real Estate MLM Script is a set of real estate online sales website scripts. A SQL injection vulnerability exists in PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 and earlier versions. The vulnerability can be exploited by remote attackers to inject SQL commands by sendi...

CVE-2018-6364

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

Sql injection

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

CVE-2018-6364

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

CVE-2018-6364

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

CVE-2018-6364

Vulnerability : Multilanguage Real Estate MLM Script (3.0 and earlier) has an SQL injection in the srch parameter of /product-list.php . Multiple sources (CNVD/NVD) describe remote, unauthenticated exploitation with high impact to confidentiality, integrity, and availability. CVSSv3.0 base score ...

PT-2018-17507

Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0 Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter. Recommendations For versions prior to 3.0, update to versi...

CVE-2018-6364: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

Multilanguage Real Estate MLM Script 3.0 - srch SQL Injection

Multilanguage Real Estate MLM Script 3.0 - srch SQL Injection Exploit Title: Multilanguage Real Estate MLM Script = 3.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link:...

Multilanguage Real Estate MLM Script 3.0 SQL Injection

Exploit Title: Multilanguage Real Estate MLM Script = 3.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/y2OP4658391/php-scripts/multilanguage-real-estate-mlm-script Version: = 3.0 Category: Webapps...

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...

Multilanguage Estate Agency Pro 1.2 - SQL Injection

Multilanguage Estate Agency Pro 1.2 - SQL Injection Exploit Title: Multilanguage Estate Agency Pro 1.2 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://djrust26.hu/ Software Buy: https://codecanyon.net/item/multilanguage-estate-agency-pro-12/14521069 Demo:...