PHP Scripts Mall Entrepreneur Job Portal Script HTML Injection Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 suffers from an HTML injection vulnerability, which can be exploited by an attacker via the search bar to achieve HTML injection...

PHP Scripts Mall Advance B2B Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based scripts for B2B business-to-business trading websites. PHP Scripts Mall Advance B2B Script 2.1.4 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...

CVE-2019-7437

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...

CVE-2019-7437

CVE-2019-7437 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2 and is a reflected Cross-Site Scripting (XSS) vulnerability triggered via the Search field. The connected sources consistently describe the issue as a reflected XSS flaw in the search input, with no additional details o...

CVE-2019-7436

CVE-2019-7436 affects the PHP Scripts Mall Opensource Classified Ads Script version 3.2.2, with a vulnerability in the uploads directory handling that enables a directory traversal by directly requesting a listing of the uploads directory. The root cause is improper access control for the uploads...

CVE-2019-7436

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7435

CVE-2019-7435 affects PHP Scripts Mall Opensource Classified Ads Script 3.2.2, which shows a reflected HTML injection vulnerability via the Search Form. The root cause is reflected HTML injection in the search functionality, enabling an attacker to manipulate HTML output. The CVSS details indicat...

CVE-2019-7434

This CVE affects PHP Scripts Mall Rental Bike Script 2.0.3, where a directory traversal flaw allows listing of an uploads directory via a direct request. The root cause is improper validation of file paths, enabling access to sensitive upload contents. The connected documents confirm the same iss...

CVE-2019-7433

CVE-2019-7433 affects PHP Scripts Mall Rental Bike Script 2.0.3 and is described as a Cross-Site Request Forgery (CSRF) via the Edit Profile feature. The NVD entry lists impact metrics (CVSS v3 base score 8.8, HIGH) with network attack vector, low attack complexity, no privileges required, and us...

CVE-2019-7433

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

CVE-2019-7432

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...

CVE-2019-7431

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...

CVE-2019-7431

CVE-2019-7431 affects PHP Scripts Mall Image Sharing Script 1.3.4. The vulnerability is a directory traversal vulnerability exploitable by a direct request to list the uploads directory, enabling access to directory contents. Public sources in the provided set corroborate a path traversal issue b...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

CVE-2019-7430

The CVE-2019-7430 entry documents a vulnerability in PHP Scripts Mall Image Sharing Script 1.3.4, described as an HTML injection via the Search Bar. The affected component is the image sharing script’s Search Bar handling; root cause details are not expanded beyond the HTML injection claim in the...

CVE-2019-7429

CVE-2019-7429 affects PHP Scripts Mall Property Rental Software 2.1.4. The vulnerability is a directory traversal issue triggered by direct requests to an uploads directory listing (e.g., wp-content/uploads/2016/08), enabling access to files within the uploads path. The NVD entry documents a simp...

CVE-2019-7429

PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory...

CVE-2018-20648

PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery CSRF via accountedit.php...

CVE-2018-20648

CVE-2018-20648 affects PHP Scripts Mall Car Rental Script 2.0.8 with a Cross-Site Request Forgery (CSRF) vulnerability exposed via accountedit.php. The vulnerability is described as CSRF, implying an unauthenticated or authenticated-user action spoofing scenario depending on the context, with pot...

CVE-2018-20647

The CVE-2018-20647 entry concerns PHP Scripts Mall Car Rental Script 2.0.8, where a directory-traversal vulnerability exists in the handling of image directories (e.g., images/). The connected records confirm the affected product and the vulnerable component/behavior, but do not provide exploitat...