Advanced Real Estate Script Project vulnerabilities
13 vulnerabilities
Known vulnerabilities in Advanced Real Estate Script Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Advanced Real Estate Script13 vulnerabilities
MediumCVE-2018-5074advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.EPSS0.49%MediumCVE-2018-5075advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.EPSS0.49%MediumCVE-2018-5076advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.EPSS0.49%MediumCVE-2018-5073advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has CSRF via admin/movieedit.php.EPSS0.40%MediumCVE-2018-5077advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/movieedit.php moviename parameter.EPSS0.49%MediumCVE-2018-5078advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/eventlist.php cast parameter.EPSS0.49%MediumCVE-2018-5072advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptOnline Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.EPSS0.49%MediumCVE-2018-15188advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptPHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.EPSS0.94%MediumCVE-2018-15189advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptPHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.EPSS0.55%HighCVE-2018-15187advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptPHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.EPSS0.45%CriticalCVE-2017-17603advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptAdvanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.EPSS3.05%MediumCVE-2019-20336advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptIn PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.EPSS0.70%HighCVE-2019-20337advanced_real_estate_script_project · advanced_real_estate_scriptadvanced_real_estate_script_project advanced_real_estate_scriptIn PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.EPSS1.04%