CVE-2019-9064

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...

CVE-2019-9064

The CVE-2019-9064 entry corresponds to a directory traversal flaw in PHP Scripts Mall Cab Booking Script 1.0.3. Multiple connected sources (CNVD, CVE records, PRION, NVD) describe that an attacker can traverse directories to reach the parent directory of a jpg or png file, exposing directory stru...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

PT-2019-19348

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1 Description The issue allows for parameter tampering of the payment amount variable, potentially enabling unauthorized modifications to payment amounts. Recommendations For PHP...

PT-2019-19347

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Cab Booking Script version 1.0.3 Description The issue allows Directory Traversal into the parent directory of a jpg or png file. Recommendations For PHP Scripts Mall Cab Booking Script version 1.0.3, consider restricting acce...

PT-2019-19349

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Appointment Booking Script version 3.0.3 Description The issue allows HTML injection in a user profile, which could potentially be used to inject malicious code. Recommendations For PHP Scripts Mall PHP Appointment Booking...

CVE-2019-9065: Undefined Security Weakness

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

CVE-2019-9063: Undefined Security Weakness

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

CVE-2019-9064: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...

PT-2019-19346

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auction website script version 2.0.4 Description The issue allows for parameter tampering of the payment amount variable. This means an attacker could potentially manipulate the payment amount during a transaction...

CVE-2019-9062: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

The CVE-2019-8361 vulnerability affects PHP Scripts Mall’s Responsive Video News Script, where an XSS flaw in the Search Bar could enable HTML injection or URL redirection. Public details describe the vulnerability but do not provide exploit code, affected versions, or explicit remediation in the...

PT-2019-18987

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Video News Script affected versions not specified Description The issue allows for XSS via the Search Bar, which could be used for HTML injection or URL redirection. Recommendations At the moment, there is no...

CVE-2019-8361: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

Cross site scripting

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

PT-2019-18053

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script version 2.0.1 Description The issue concerns a Reflected XSS vulnerability. It can be exploited via the srch parameter in the restaurants-details.php page. Recommendations For...

CVE-2019-6248: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

CVE-2019-6248 affects PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1. The connected sources consistently describe a Reflected XSS vulnerability triggered via the srch parameter, demonstrated by the restaurants-details.php endpoint. The vulnerability arises in user-supplied...