advanced real estate script project vulnerabilities

Products

• advanced real estate script 13

Latest advanced real estate script project CVEs

Newest publication first

1. CVE-2019-20336 In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.

   Published 2020-01-05

   Medium·CVSS 6.1 EPSS 0.70%

   In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.

2. CVE-2019-20337 In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.

   Published 2020-01-05

   High·CVSS 7.2 EPSS 1.0%

   In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.

3. CVE-2018-15189 PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.

   Published 2018-08-10

   Medium·CVSS 5.4 EPSS 0.55%

   PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.

4. CVE-2018-15188 PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.

   Published 2018-08-10

   Medium·CVSS 6.5 EPSS 0.94%

   PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.

5. CVE-2018-15187 PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.

   Published 2018-08-10

   High·CVSS 8.0 EPSS 0.45%

   PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.

6. CVE-2018-5078 Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.

   Published 2018-01-03

   Medium·CVSS 4.8 EPSS 0.49%

   Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.

7. CVE-2018-5077 Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.

   Published 2018-01-03

   Medium·CVSS 4.8 EPSS 0.49%

   Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.

8. CVE-2018-5076 Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.

   Published 2018-01-03

   Medium·CVSS 4.8 EPSS 0.49%

   Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.

9. CVE-2018-5075 Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.

   Published 2018-01-03

   Medium·CVSS 4.8 EPSS 0.49%

   Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.

10. CVE-2018-5074 Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.

    Published 2018-01-03

    Medium·CVSS 4.8 EPSS 0.49%

    Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.

11. CVE-2018-5073 Online Ticket Booking has CSRF via admin/movieedit.php.

    Published 2018-01-03

    Medium·CVSS 6.8 EPSS 0.40%

    Online Ticket Booking has CSRF via admin/movieedit.php.

12. CVE-2018-5072 Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.

    Published 2018-01-03

    Medium·CVSS 4.8 EPSS 0.49%

    Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.

13. CVE-2017-17603 Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.

    Published 2017-12-13

    Critical·CVSS 9.8 EPSS 3.1% Public exploit

    Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.