Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
MEDIUM 5.3
CVE-2018-20631
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
Website Seller Script
No fix yet
MEDIUM 5.4
CVE-2018-20530
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
Website Seller Script
No fix yet
MEDIUM 6.5
CVE-2018-15897
PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last…
Website Seller Script
No fix yet
MEDIUM 5.4
CVE-2018-15896
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
Website Seller Script
No fix yet
HIGH 8.8
CVE-2018-11501
PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
Website Seller Script
No fix yet
HIGH 8.8
CVE-2018-6879
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify…
Website Seller Script
No fix yet
MEDIUM 6.1
CVE-2018-6870
Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.
Website Seller Script
No fix yet