PT-2019-10138

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF flaw via the Edit Profile feature. Recommendations: For PHP Scripts Mall Entrepreneur Job Portal Script version...

PT-2019-10131

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4 Description: The issue allows directory traversal through a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For PHP Scripts Mall Advance B2B...

PT-2019-10139

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue allows remote attackers to cause a denial of service, specifically an outage of profile editing, by injecting crafted JavaScript code into the KeySkills fiel...

CVE-2019-7435: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...

PT-2019-10124

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Charity Donation Script readymadeb2bscript affected versions not specified Description: The issue concerns a directory traversal vulnerability. It can be exploited by making a direct request for a listing of an uploads...

CVE-2018-20642: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-10121

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Consumer Reviews Script version 4.0.3 Description: The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory. Recommendations: For PHP...

PT-2019-18609

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...

CVE-2018-20639: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

PT-2019-10145

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Car Rental Script version 2.0.8 Description: The issue allows for Cross-Site Request Forgery CSRF via the "accountedit.php" page. Recommendations: For PHP Scripts Mall Car Rental Script version 2.0.8, consider implementing...

PT-2019-18610

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...

PT-2019-18603

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.4 Description The issue concerns HTML injection via the Search Bar, which could potentially allow malicious code execution. Recommendations For PHP Scripts Mall Image Sharing Script version...

CVE-2018-20635: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-10132

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue concerns HTML injection via the First Name field. Recommendations: For version 2.0.1, update the software to prevent HTML injection via the First Nam...

PT-2019-10135

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Entrepreneur Job Portal Script version 3.0.1 Description: The issue concerns HTML injection via the Search Bar, which could potentially allow attackers to inject malicious HTML code. Recommendations: For PHP Scripts Mall...

CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...

PT-2019-10134

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1 Description: The issue allows directory traversal via a direct request for a listing of an image directory, such as an assets/ directory. Recommendations: For version 2.0.1...

CVE-2018-20638: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...