CVE-2017-17985

The Muslim Matrimonial Script from PHP Scripts Mall is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the admin/state_view.php cou_id parameter. Multiple sources (NVD entry CVE-2017-17985, CNVD-2018-01241) confirm XSS through this parameter, indicating input is not properly sa...

CVE-2017-17988

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

CVE-2017-17986

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...

CVE-2017-17981

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17985

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...

CVE-2017-17982

PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...

PT-2017-15143

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue allows for arbitrary file upload via the admin/mydetails edit.php API endpoint. This could potentially lead to unauthorized access or malicious...

CVE-2017-17988: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

CVE-2017-17987: Unrestricted Upload of File with Dangerous Type

PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...

CVE-2017-17986: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...

CVE-2017-17985: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...

CVE-2017-17984: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2017-17983: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...

CVE-2017-17982: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...

CVE-2017-17981: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

PT-2017-15137

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is with the edit id parameter in the "admin/slider...

PT-2017-15141

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to inadequate input validation in the cou id...

PT-2017-15140

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the edit id...

PT-2017-15142

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it affects the comm id parameter in the admin/caste...

PT-2017-15139

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to SQL injection. It affects the view-profile.php file through the mem id parameter. Recommendations At the moment, there is no...