718 matches found
PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability (CNVD-2018-00498)
PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'title' parameter to the admin/sitesettings.php file...
CVE-2017-17960: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17957: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
CVE-2017-17959: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...
CVE-2017-17958: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
CVE-2017-17956: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
CVE-2017-17953: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...
CVE-2017-17951: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...
CVE-2017-17940: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...
CVE-2017-17939: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...
CVE-2017-17938: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
PHP Scripts Mall Professional Service Script Information Disclosure Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. An information disclosure vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit the vulnerability by sending PATHINFO via a speciall...
PHP Scripts Mall Professional Service Script Predictable Registration URL Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A predictable registration URL vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker could exploit this vulnerability to register with an invali...
CVE-2017-17955: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17941: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
CVE-2017-17952: Improper Input Validation
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability (CNVD-2018-00494)
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the admin/generalsettingupd.php...
CVE-2017-17930
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...