CVE-2019-7554: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...

PHP Scripts Mall Amazon Affiliate Store Input Validation Error Vulnerability

PHP Scripts Mall Amazon Affiliate Store is an online e-store system by PHP Scripts Mall India. An input validation error vulnerability exists in PHP Scripts Mall Amazon Affiliate Store version 2.1.6, which can be exploited by attackers to tamper with payment amounts...

Cross site scripting

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...

CVE-2019-9605

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...

CVE-2019-9604

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...

CVE-2019-9605: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...

PT-2019-19743

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0 Description The issue concerns a Cross-Site Request Forgery CSRF flaw related to Edit Profile actions. Recommendations For PHP Scripts Mall Online Lottery PHP Readymade Script...

CVE-2019-9604: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...

PT-2019-19744

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0 Description The issue concerns a Reflected Cross-site Scripting XSS flaw. This occurs via the err value in a .ico picture upload. Recommendations For PHP Scripts Mall Online...

CVE-2019-9864

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount...

PT-2019-19899

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Amazon Affiliate Store version 2.1.6 Description The issue allows for parameter tampering of the payment amount variable. This means an attacker could potentially manipulate the payment amount during a transaction...

CVE-2019-9864: Undefined Security Weakness

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount...

CVE-2019-7435

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

CVE-2019-7436

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7431

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7434

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7436

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

Directory traversal

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...