CVE-2018-20641: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2018-20640: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting XSS via the Full Name field...

CVE-2018-20643: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...

CVE-2018-20639: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar...

CVE-2018-20642: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service outage of profile editing via crafted JavaScript code in the KeySkills field...

PHP Scripts Mall Entrepreneur B2B Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Entrepreneur B2B Script is a suite of B2B e-commerce platforms from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Entrepreneur B2B Script version 3.0.6, which can be exploited by a remote attacker to inject arbitrary web script or HTML vi...

CVE-2018-20138: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541...

PT-2018-15266

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Entrepreneur B2B Script version 3.0.6 Description The issue allows for Stored XSS attacks through certain fields in the Account Settings, such as FirstName and LastName. This is similar to a previously identified issue...

CVE-2018-7469

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...

CVE-2018-7469: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the pname aka Edit Category Name field to admin/categoriesindustry.php aka Categories - Industry Type...