advanced real estate script vulnerabilities and fixes

Recent CVEs affecting advanced real estate script, with upgrade or downgrade steps. 13 tracked.

Also searched as: advancedrealestatescript.

advanced real estate script has 13 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-05. Highest priority: CVE-2017-17603 (score 66/100).

• CVE-2019-20337 HIGH 7.2 DOWNGRADE In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQ
• CVE-2019-20336 MEDIUM 6.1 DOWNGRADE In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerab
• CVE-2018-5078 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.
• CVE-2018-5077 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.
• CVE-2018-5076 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.
• CVE-2018-5075 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.
• CVE-2018-5074 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.
• CVE-2018-5073 MEDIUM 6.8 MITIGATE Online Ticket Booking has CSRF via admin/movieedit.php.
• CVE-2018-5072 MEDIUM 4.8 MITIGATE Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.
• CVE-2018-15189 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
• CVE-2018-15188 MEDIUM 6.5 DOWNGRADE PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page
• CVE-2018-15187 HIGH 8.0 DOWNGRADE PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
• CVE-2017-17603 CRITICAL 9.8 DOWNGRADE Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searcht

FAQ

How do I fix advanced real estate script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is advanced real estate script being exploited right now?

None of the tracked advanced real estate script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which advanced real estate script CVE should I patch first?

CVE-2017-17603 currently ranks highest (66/100): Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searcht.

RSS feed for advanced real estate script · ← Back to latest CVEs