CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

PT-2019-10130

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...

PT-2019-10129

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...

PT-2019-18608

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...

PT-2019-10140

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a directory traversal vulnerability. This can be exploited via a direct request for a listing of an image directory, such as the assets/ directory...

PT-2019-10138

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations: For PHP Scripts Mall Entrepreneur Job Portal Script version...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...

PT-2019-10139

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, specifically an outage of profile editing, by injecting crafted JavaScript code into the KeySkills fiel...

CVE-2019-7435: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

PT-2019-10124

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Donation Script readymadeb2bscript affected versions not specified Description: The issue concerns a directory traversal vulnerability. It can be exploited by making a direct request for a listing of an uploads...

CVE-2018-20642: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-18610

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...

CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-10121

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations: For PHP...

PT-2019-18609

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...

CVE-2018-20639: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20636: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field...

CVE-2018-20637: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service unrecoverable blank profile via crafted JavaScript code in the First Name and Last Name field...