CVE-2019-9604

The CVE-2019-9604 entry concerns PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0, with a Cross-Site Request Forgery (CSRF) vulnerability affecting Edit Profile actions. The initial description specifies CSRF as the issue, and the connected records reaffirm the same vulnerability detail...

CVE-2019-9605

CVE-2019-9605 affects PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw exploitable via the err value during a .ico picture upload. Affected component is the web input handling that returns user-supplied data in a response...