Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2019-7553
Disclosure Date: June 06, 2019 (last updated November 27, 2024)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field.
0
Attacker Value
Unknown
CVE-2018-20637
Disclosure Date: March 21, 2019 (last updated November 27, 2024)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
0
Attacker Value
Unknown
CVE-2018-20638
Disclosure Date: March 21, 2019 (last updated November 27, 2024)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
0
Attacker Value
Unknown
CVE-2018-20636
Disclosure Date: March 21, 2019 (last updated November 27, 2024)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
0
Attacker Value
Unknown
CVE-2018-15186
Disclosure Date: August 10, 2018 (last updated November 27, 2024)
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.
0
Attacker Value
Unknown
CVE-2018-13256
Disclosure Date: July 09, 2018 (last updated November 27, 2024)
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.
0
