PT-2019-10141

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit profile feature. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider implementing proper...

PT-2019-10133

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an unrecoverable blank profile. This can be achieved by injecting crafted JavaScri...

PT-2019-10122

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue concerns HTML injection via the search box, allowing potential malicious activities. Recommendations: For PHP Scripts Mall Consumer Reviews Script version 4.0.3,...

PT-2019-18604

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue allows for directory traversal through a direct request for a listing of an uploads directory. Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.4,...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...

PT-2019-10130

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows remote attackers to cause a denial of service by modifying the page structure through JavaScript code input in the First Name field. Recommendations: For PHP...

PT-2019-10140

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a directory traversal vulnerability. This can be exploited via a direct request for a listing of an image directory, such as the assets/ directory...

PT-2019-10138

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations: For PHP Scripts Mall Entrepreneur Job Portal Script version...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...

PT-2019-10139

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, specifically an outage of profile editing, by injecting crafted JavaScript code into the KeySkills fiel...

PT-2019-10129

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit Profile feature. Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, consider disabling the...

PT-2019-10124

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Donation Script readymadeb2bscript affected versions not specified Description: The issue concerns a directory traversal vulnerability. It can be exploited by making a direct request for a listing of an uploads...

PT-2019-10121

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations: For PHP...

PT-2019-18609

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...

PT-2019-10145

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Car Rental Script version 2.0.8 Description: The issue allows for Cross-Site Request Forgery CSRF via the "accountedit.php" page. Recommendations: For PHP Scripts Mall Car Rental Script version 2.0.8, consider implementing...

PT-2019-18610

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...

PT-2019-18603

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...

PT-2019-10132

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue concerns HTML injection via the First Name field. Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Nam...

PT-2019-10135

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns HTML injection via the Search Bar, which could potentially allow attackers to inject malicious HTML code. Recommendations: For PHP Scripts Mall...

PT-2019-10142

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...