CVE-2019-7431: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2018-20638: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-10139

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, specifically an outage of profile editing, by injecting crafted JavaScript code into the KeySkills fiel...

CVE-2018-20639: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20630: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20626: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20629: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...

PT-2019-10142

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...

CVE-2019-7433: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

PT-2019-10123

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Foundation Script versions 1 through 3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations:...

PT-2019-10129

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...

PT-2019-10130

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...

PT-2019-10121

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations: For PHP...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...

PT-2019-10144

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Car Rental Script version 2.0.8 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an images/ directory. Recommendations: For PHP Scripts Mall Car Renta...

PT-2019-10145

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Car Rental Script version 2.0.8 Description: The issue allows for Cross-Site Request Forgery CSRF via the "accountedit.php" page. Recommendations: For PHP Scripts Mall Car Rental Script version 2.0.8, consider implementing...

PT-2019-10141

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit profile feature. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider implementing proper...

PT-2019-10137

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the Full Name field. This allows an attacker to inject malicious scripts into the...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...