954 matches found
Cross site request forgery (csrf)
PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...
Directory traversal
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9062
PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9065
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...
CVE-2019-9066
PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...
CVE-2019-9063
The CVE-2019-9063 entry concerns PHP Scripts Mall Auction website script version 2.0.4, where an input validation vulnerability allows parameter tampering of the payment amount. Connected CNVD/NVD records describe an input validation flaw enabling modification of the donation/paid amount; exploit...
CVE-2019-9062
The CVE-2019-9062 entry concerns PHP Scripts Mall Online Food Ordering Script version 1.0, where a Cross-Site Request Forgery (CSRF) exists in my-account.php. The available connected documents corroborate a CSRF vulnerability in that file, enabling unauthorized state-changing requests. PT-2019-19...
CVE-2019-9066
The CVE-2019-9066 entry concerns PHP Scripts Mall PHP Appointment Booking Script 3.0.3, with a vulnerability described as HTML injection in the user profile page. Multiple connected sources (NVD entry and CNVD description) confirm the affected software and the form of the issue. The root cause is...
CVE-2019-9065
CVE-2019-9065 affects PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1. The connected CNVD/NVD records describe an input validation vulnerability that enables parameter tampering of the payment amount, allowing an attacker to alter the charged value. The issue stems from insufficient valida...
CVE-2019-9064
The CVE-2019-9064 entry corresponds to a directory traversal flaw in PHP Scripts Mall Cab Booking Script 1.0.3. Multiple connected sources (CNVD, CVE records, PRION, NVD) describe that an attacker can traverse directories to reach the parent directory of a jpg or png file, exposing directory stru...
PT-2019-19346
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auction website script version 2.0.4 Description The issue allows for parameter tampering of the payment amount variable. This means an attacker could potentially manipulate the payment amount during a transaction...
PT-2019-19347
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Cab Booking Script version 1.0.3 Description The issue allows Directory Traversal into the parent directory of a jpg or png file. Recommendations For PHP Scripts Mall Cab Booking Script version 1.0.3, consider restricting acce...
PT-2019-19348
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1 Description The issue allows for parameter tampering of the payment amount variable, potentially enabling unauthorized modifications to payment amounts. Recommendations For PHP...
PT-2019-19349
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Appointment Booking Script version 3.0.3 Description The issue allows HTML injection in a user profile, which could potentially be used to inject malicious code. Recommendations For PHP Scripts Mall PHP Appointment Booking...
CVE-2019-9063: Undefined Security Weakness
PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...
CVE-2019-9064: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9065: Undefined Security Weakness
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...
