845 matches found
CVE-2018-15186
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...
CVE-2018-15187
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
Design/Logic Flaw
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...
Cross site request forgery (csrf)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...
CVE-2018-15187
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
CVE-2018-15189
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...
CVE-2018-15185
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
CVE-2018-15186
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...
CVE-2018-15187
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
CVE-2018-15185: Improper Input Validation
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
CVE-2018-15189: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...
PT-2018-12932
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue allows remote attackers to cause a denial of service, specifically a page update outage, by injecting crafted PHP and JavaScript code into the Current...
PT-2018-12933
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description The issue concerns a CSRF vulnerability. It affects the client/auditor/updprofile.php endpoint. Recommendations For version 2.0.1, consider implementing proper...
CVE-2018-15187: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
PT-2018-12936
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...
PT-2018-12937
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows for XSS attacks through the First Name, Last Name, or Address field. Recommendations For version 2.0.4, update to a newer version that contains a fix for this iss...
CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer
PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...
PT-2018-12934
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a CSRF vulnerability. It affects the "edit-profile.php" endpoint. Recommendations For version 4.0.9, consider implementing proper CSRF protection...
PT-2018-12935
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue allows remote attackers to cause a denial of service, resulting in page structure loss, by injecting crafted JavaScript code into the Name field of a user profile...