CVE-2019-7553

CVE-2019-7553 affects PHP Scripts Mall Chartered Accountant: Auditor Website version 2.0.1, with a Stored XSS in the Profile Update page via the My Name field. Several sources (Red Hat advisory, CNVD, CVE listings, and PT-2019-18644) confirm the vulnerability type as stored XSS and point to the s...

CVE-2018-13256

The CVE-2018-13256 issue affects the PHP Scripts Mall Auditor Website 2.0.1, where the firstname and lastname parameters are vulnerable to Cross‑Site Scripting (XSS). The connected sources describe both reflected and stored XSS vectors demonstrated in PoCs/exploits for version 2.0.1, confirming a...

CVE-2018-20637

CVE-2018-20637 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability allows remote attackers to cause a denial of service (unrecoverable blank profile) by sending crafted JavaScript in the First Name and Last Name fields. Documented impact per CVSS metrics shows...

CVE-2018-20636

CVE-2018-20636 affects PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1. The vulnerability is HTML injection via the First Name field. Public references confirm the product/version and injection class; CVSS v3.0 base score is 5.4 (MEDIUM) with network access and user interaction requ...

CVE-2018-15186

The CVE refers to a CSRF vulnerability in PHP Scripts Mall Chartered Accountant: Auditor Website 2.0.1, exploitable via the endpoint client/auditor/updprofile.php. The connected documents corroborate CSRF in this URL path, but do not provide exploit code, affected versions beyond 2.0.1, or remedi...

CVE-2018-20638

CVE-2018-20638 affects PHP Scripts Mall Chartered Accountant: Auditor Website 2.0.1 and describes a directory traversal vulnerability that allows a direct request to list files in an image directory (e.g., assets/). The connected documents corroborate a path disclosure via directory listing; no e...