CVE-2018-15186

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

Design/Logic Flaw

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

Cross site request forgery (csrf)

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15189

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15186

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15185: Improper Input Validation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15189: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

PT-2018-12932

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue allows remote attackers to cause a denial of service, specifically a page update outage, by injecting crafted PHP and JavaScript code into the Current...

PT-2018-12933

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description The issue concerns a CSRF vulnerability. It affects the client/auditor/updprofile.php endpoint. Recommendations For version 2.0.1, consider implementing proper...

CVE-2018-15187: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

PT-2018-12936

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...

PT-2018-12937

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows for XSS attacks through the First Name, Last Name, or Address field. Recommendations For version 2.0.4, update to a newer version that contains a fix for this iss...

PT-2018-12938

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field. Recommendations For PHP Scripts Mall...

CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

PT-2018-12934

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a CSRF vulnerability. It affects the "edit-profile.php" endpoint. Recommendations For version 4.0.9, consider implementing proper CSRF protection...

PT-2018-12935

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue allows remote attackers to cause a denial of service, resulting in page structure loss, by injecting crafted JavaScript code into the Name field of a user profile...