Advanced Real Estate Script Project Advanced Real Estate Script vulnerabilities
13 vulnerabilities
Known vulnerabilities in Advanced Real Estate Script Project Advanced Real Estate Script, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-5074advanced_real_estate_script_projectadvanced_real_estate_script
EPSS score0.49%
Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.CVE-2018-5075advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.49%
Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.CVE-2018-5076advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.49%
Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.CVE-2018-5073advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.40%
Online Ticket Booking has CSRF via admin/movieedit.php.CVE-2018-5077advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.49%
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.CVE-2018-5078advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.49%
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.CVE-2018-5072advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.49%
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.CVE-2018-15188advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.94%
PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.CVE-2018-15189advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.55%
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.CVE-2018-15187advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.45%
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.CVE-2017-17603advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score3.05%
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.CVE-2019-20336advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score0.70%
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.CVE-2019-20337advanced_real_estate_script_projectadvanced_real_estate_scriptEPSS score1.04%
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.