CVE-2017-17929

The CVE concerns PHP Scripts Mall Professional Service Script. Affected component: admin/bannerview.php with the view parameter vulnerable to XSS. This is described across multiple sources as a cross-site scripting vulnerability in the Professional Service Script, enabling script execution via th...

CVE-2017-17928

The CVE-2017-17928 entry concerns PHP Scripts Mall Professional Service Script. It describes an SQL injection vulnerability in the admin/review.php endpoint triggered via the id parameter, allowing an attacker to manipulate queries. Connected CNVD/NVD records corroborate a SQL injection vulnerabi...

CVE-2017-17928

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...

PT-2017-15105

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to SQL injection, which occurs via the id parameter in the "admin/review.php" API endpoint. Recommendations At the moment, there is n...

PT-2017-15103

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to register with an invalid or spoofed e-mail address due to a predictable registration URL. Recommendations At the...

PT-2017-15106

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is exploited through the view parameter in the...

PT-2017-15107

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue concerns a CSRF problem via the "admin/general settingupd.php" endpoint, which can be exploited to modify settings in the user panel...

PT-2017-15108

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Resume Clone Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the username parameter in the forget.php file. This allows for potential exploitation. Recommendations At...

PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

PHP Scripts Mall Responsive Realestate Script Cross-Site Request Forgery Vulnerability

Responsive Realestate Script is a script for building real estate websites. A cross-site request forgery vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can exploit this vulnerability by using admin/general to trick users into injecting web script or HTML,...

PHP Scripts Mall Responsive Realestate Script Cross-Site Scripting Vulnerability

Responsive Realestate Script is a script for building real estate websites. A cross-site scripting vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can inject arbitrary web script or HTML by sending the 'gplus' parameter to the admin/general.php file...

PT-2017-15104

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This can be achieved by sending a crafted PATH INFO to the...

PT-2017-15101

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This is achieved by exploiting the id parameter in the "admin/review...

CVE-2017-17905

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

CVE-2017-17906

PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter...

CVE-2017-17908

PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...

CVE-2017-17909

PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...

CVE-2017-17905

Vulnerability: CVE-2017-17905 in PHP Scripts Mall Car Rental Script exhibits a Cross-Site Request Forgery (CSRF) through admin/sitesettings.php. Root cause: CSRF flaw allowing unauthorized state-changing requests via the affected admin interface. Impact (as stated): partial to high confidentialit...

CVE-2017-17907

CVE-2017-17907 affects PHP Scripts Mall Car Rental Script and is an XSS vulnerability exploitable via the admin/areaedit.php?carid parameter or admin/sitesettings.php?websitename parameter. Public records describe reflected/stored XSS vectors in these parameters, enabling injecting HTML/JS conten...

CVE-2017-17908

The CVE-2017-17908 entry concerns PHP Scripts Mall’s Responsive Realestate Script, which has a Cross-Site Request Forgery (CSRF) via the admin/general path. The vulnerability is documented across multiple sources (NVD, CNVD, CVE listing) with CSRF described as enabling an attacker to induce state...