CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

Cross site request forgery (csrf)

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

Cross site request forgery (csrf)

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15186

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15188

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15188

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

Design/Logic Flaw

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15187

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...

CVE-2018-15186

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...

CVE-2018-15189

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

PT-2018-12933

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description The issue concerns a CSRF vulnerability. It affects the client/auditor/updprofile.php endpoint. Recommendations For version 2.0.1, consider implementing proper...

CVE-2018-15190: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

PT-2018-12936

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code into the Name field of a user profile, potentially leading to unauthoriz...

PT-2018-12934

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a CSRF vulnerability. It affects the "edit-profile.php" endpoint. Recommendations For version 4.0.9, consider implementing proper CSRF protection...

PT-2018-12932

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue allows remote attackers to cause a denial of service, specifically a page update outage, by injecting crafted PHP and JavaScript code into the Current...

CVE-2018-15185: Improper Input Validation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...