EUVD-2019-10890

Malware in sbrugna...

PHP Scripts Mall advanced-real-estate-script SQL Injection Vulnerability

PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A SQL injection vulnerability exists in the 'newsid' parameter of the newsedit.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability stems from a...

CVE-2019-20337

Summary: CVE-2019-20337 affects PHP Scripts Mall advanced-real-estate-script 4.0.9. The vulnerability is in news_edit.php, where the news_id parameter is vulnerable to SQL Injection. The root cause is improper input validation/sanitization of externally provided SQL statements. Reported impact in...