845 matches found
PT-2019-18602
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Property Rental Software version 2.1.4 Description The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2016/08' directory. Recommendations For PHP...
PT-2019-10127
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Website Seller Script version 2.0.5 Description: The issue allows for full Path Disclosure via a request for an arbitrary image URL, such as a .png file. Recommendations: For version 2.0.5, update to a newer version that...
PT-2019-10128
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the FIRST NAME or LAST NAME field. Recommendations: For PHP Scripts Mall Advance B2B Script version...
PT-2019-10134
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue allows directory traversal via a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For version 2.0.1...
PT-2019-10142
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...
PT-2019-18605
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns HTML injection via the STREET field in the Profile Edit section. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update the software to a...
PT-2019-10126
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance Crowdfunding Script version 2.0.3 Description: The issue allows for directory traversal through a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory...
PT-2019-10132
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue concerns HTML injection via the First Name field. Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Nam...
CVE-2018-20634: Improper Restriction of Operations within the Bounds of a Memory Buffer
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service changed Page structure via JavaScript code in the First Name field...
PT-2019-10123
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Foundation Script versions 1 through 3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations:...
CVE-2018-20626: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...
PT-2019-10137
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the Full Name field. This allows an attacker to inject malicious scripts into the...
PT-2019-18604
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4,...
CVE-2018-20644: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...
CVE-2019-7430: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
PT-2019-10141
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit profile feature. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider implementing proper...
PT-2019-18603
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...
PT-2019-10145
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Car Rental Script version 2.0.8 Description: The issue allows for Cross-Site Request Forgery CSRF via the "accountedit.php" page. Recommendations: For PHP Scripts Mall Car Rental Script version 2.0.8, consider implementing...
CVE-2018-20647: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory...