PT-2019-10128

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns stored Cross-Site Scripting XSS that can be triggered via the FIRST NAME or LAST NAME field. Recommendations: For PHP Scripts Mall Advance B2B Script version...

PT-2019-10127

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Website Seller Script version 2.0.5 Description: The issue allows for full Path Disclosure via a request for an arbitrary image URL, such as a .png file. Recommendations: For version 2.0.5, update to a newer version that...

PT-2019-10126

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance Crowdfunding Script version 2.0.3 Description: The issue allows for directory traversal through a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory...

PT-2019-18604

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4,...

PT-2019-18603

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...

PT-2019-18609

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...

PT-2019-18608

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...

PT-2019-18610

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...

PT-2019-10122

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue concerns HTML injection via the search box, allowing potential malicious activities. Recommendations: For PHP Scripts Mall Consumer Reviews Script version 4.0.3,...

PT-2019-10133

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an unrecoverable blank profile. This can be achieved by injecting crafted JavaScri...

PT-2019-10124

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Donation Script readymadeb2bscript affected versions not specified Description: The issue concerns a directory traversal vulnerability. It can be exploited by making a direct request for a listing of an uploads...

CVE-2019-7435: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

PT-2019-18605

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns HTML injection via the STREET field in the Profile Edit section. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update the software to a...

CVE-2018-20631: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file...

PT-2019-10138

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations: For PHP Scripts Mall Entrepreneur Job Portal Script version...

PT-2019-10140

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a directory traversal vulnerability. This can be exploited via a direct request for a listing of an image directory, such as the assets/ directory...

PT-2019-18602

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Property Rental Software version 2.1.4 Description The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2016/08' directory. Recommendations For PHP...

PT-2019-18607

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3,...

PT-2019-18606

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Rental Bike Script version 2.0.3 Description The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations For PHP Scripts Mall Rental Bike Script version 2.0.3, update to a newer...

CVE-2019-7429: Exposure of Sensitive Information to an Unauthorized Actor

PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...