1488 matches found
CVE-2017-17928
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
CVE-2017-17927
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...
CVE-2017-17924
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/reviewuserwise.php...
CVE-2017-17924
The CVE-2017-17924 vulnerability affects PHP Scripts Mall Professional Service Script, enabling information disclosure: remote attackers can obtain sensitive full-path information via the id parameter in admin/review_userwise.php. Root cause is improper handling of the id parameter, leading to ex...
PT-2017-15106
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is exploited through the view parameter in the...
PT-2017-15105
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to SQL injection, which occurs via the id parameter in the "admin/review.php" API endpoint. Recommendations At the moment, there is n...
PT-2017-15103
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to register with an invalid or spoofed e-mail address due to a predictable registration URL. Recommendations At the...
PT-2017-15108
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Resume Clone Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the username parameter in the forget.php file. This allows for potential exploitation. Recommendations At...
PHP Scripts Mall Responsive Realestate Script Cross-Site Scripting Vulnerability
Responsive Realestate Script is a script for building real estate websites. A cross-site scripting vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can inject arbitrary web script or HTML by sending the 'gplus' parameter to the admin/general.php file...
PT-2017-15101
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This is achieved by exploiting the id parameter in the "admin/review...
PT-2017-15104
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This can be achieved by sending a crafted PATH INFO to the...
PT-2017-15107
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue concerns a CSRF problem via the "admin/general settingupd.php" endpoint, which can be exploited to modify settings in the user panel...
PT-2017-15102
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...
CVE-2017-17906
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17906
PHP Scripts Mall Car Rental Script suffers an SQL Injection vulnerability in the admin/carlistedit.php carid parameter. The issue allows backend database manipulation, with high impact on confidentiality, integrity, and availability (CVSS v3.0 9.8). No remediation details are provided in the supp...
CVE-2017-17908
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17909
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
CVE-2017-17905
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
CVE-2017-17907
CVE-2017-17907 affects PHP Scripts Mall Car Rental Script and is an XSS vulnerability exploitable via the admin/areaedit.php?carid parameter or admin/sitesettings.php?websitename parameter. Public records describe reflected/stored XSS vectors in these parameters, enabling injecting HTML/JS conten...