CVE-2019-20337

概要

参考情報

• Mad-robot/CVE-List · Exploit

advanced real estate script のその他の脆弱性

• CVE-2019-20336中 6.1In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
• CVE-2018-15189中 5.4PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
• CVE-2018-15188中 6.5PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted Ja…
• CVE-2018-15187高 8.0PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
• CVE-2017-17603緊急 9.8Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice p…