Advanced Real Estate Script Project
Advanced Real Estate Script Project Advanced Real Estate Script: vulnerabilidades y CVE
Advanced Real Estate Script Project Advanced Real Estate Script tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-20337 | Alta (7.2) | 1.0% | — | 5 ene 2020 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection. |
| CVE-2019-20336 | Media (6.1) | 0.70% | — | 5 ene 2020 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS. |
| CVE-2018-15189 | Media (5.4) | 0.55% | — | 10 ago 2018 | PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile. |
| CVE-2018-15188 | Media (6.5) | 0.94% | — | 10 ago 2018 | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile. |
| CVE-2018-15187 | Alta (8) | 0.45% | — | 10 ago 2018 | PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php. |
| CVE-2018-5078 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/eventlist.php cast parameter. |
| CVE-2018-5077 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter. |
| CVE-2018-5076 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter. |
| CVE-2018-5075 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter. |
| CVE-2018-5074 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter. |
| CVE-2018-5073 | Media (6.8) | 0.40% | — | 3 ene 2018 | Online Ticket Booking has CSRF via admin/movieedit.php. |
| CVE-2018-5072 | Media (4.8) | 0.49% | — | 3 ene 2018 | Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter. |
| CVE-2017-17603 | Crítica (9.8) | 3.0% | — | 13 dic 2017 | Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter. |