CVE-2018-15188

Mô tả

Tham khảo

• gkaim.com/cve-2018-15188-vikas-chaudhary · Exploit

Lỗ hổng khác của advanced real estate script

• CVE-2019-20337CAO 7.2In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
• CVE-2019-20336TRUNG BÌNH 6.1In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
• CVE-2018-15189TRUNG BÌNH 5.4PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
• CVE-2018-15187CAO 8.0PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
• CVE-2017-17603NGHIÊM TRỌNG 9.8Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice p…