CVE-2018-20631: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...

PT-2019-10133

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an unrecoverable blank profile. This can be achieved by injecting crafted JavaScri...

CVE-2018-20629: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

PT-2019-18607

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3,...

PT-2019-10122

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue concerns HTML injection via the search box, allowing potential malicious activities. Recommendations: For PHP Scripts Mall Consumer Reviews Script version 4.0.3,...

PT-2019-18606

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update to a newer...

CVE-2019-7433: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7437: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...

CVE-2019-7429: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...

CVE-2018-20648: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...

CVE-2018-20645: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20638: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20637: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service unrecoverable blank profile via crafted JavaScript code in the First Name and Last Name field...

CVE-2018-20636: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20633: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20630: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20628: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20627: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box...

CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2018-20640: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...