1488 matches found
PHP Scripts Mall Professional Service Script Predictable Registration URL Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A predictable registration URL vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker could exploit this vulnerability to register with an invali...
CVE-2017-17959: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...
CVE-2017-17956: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
CVE-2017-17955: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17960: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17958: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
PT-2017-15131
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the "admin/sellerupd.php" API endpoint. Recommendations At the moment, there is no information abou...
PT-2017-15130
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which can be exploited via the usid parameter in the "seller-view.php" API endpoint. Recommendations For PHP Scripts...
PT-2017-15114
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the...
PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability
PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'theaterid' parameter to the admin/viewtheatre.php file...
PT-2017-15116
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...
CVE-2017-17908
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
CVE-2017-17908
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17925
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
CVE-2017-17926
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17931
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...
CVE-2017-17927
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...