827 matches found
CVE-2018-15185
Vulnerability summary (CVE-2018-15185) : PHP Scripts Mall Naukri/Shine/Jobsite Clone Script version 3.0.4 is affected. A remote attacker can trigger a denial of service (page update outage) by submitting crafted PHP and JavaScript code in the “Current Position” field. This is documented across mu...
CVE-2018-15186: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php...
CVE-2018-15189: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile...
CVE-2018-15185: Improper Input Validation
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
CVE-2018-15187: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer
PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...
CVE-2018-15190: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...
CVE-2018-15183
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15184
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
CVE-2018-15184
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
CVE-2018-15182
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
Design/Logic Flaw
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
CVE-2018-15182
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
CVE-2018-15184
CVE-2018-15184 affects PHP Scripts Mall Naukri/Shine/Jobsite Clone Script, version 3.0.4. The vulnerability is a stored cross-site scripting (XSS) issue in the USERNAME field, as described in multiple sources (notably the CVE entry and CNVD/NVD records). The root cause is input handling that allo...
CVE-2018-15183
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15182
CVE-2018-15182 affects PHP Scripts Mall Car Rental Script 2.0.8, with Cross‑Site Scripting via the FirstName and LastName fields. The connected documents corroborate an HTML/JS injection vulnerability in this script, but the provided materials do not specify the exact root cause, affected code lo...
CVE-2018-15183: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15184: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...