845 matches found
CVE-2017-17929
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...
CVE-2017-17930
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
CVE-2017-17906
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
CVE-2017-17907
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
CVE-2017-17925
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
CVE-2017-17926
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
Code injection
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
Code injection
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
Sql injection
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...
Cross site request forgery (csrf)
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
Cross site request forgery (csrf)
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...
Design/Logic Flaw
PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...
Sql injection
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
Sql injection
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...
Cross site request forgery (csrf)
PHP Scripts Mall Professional Service Script has CSRF via admin/generalsettingupd.php, as demonstrated by modifying a setting in the user panel...
Code injection
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...
Code injection
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17909: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
CVE-2017-17925: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...
CVE-2017-17906: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...