PatchTheCVE: advanced real estate scripthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-20337: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQhttps://patchthecve.com/cve/CVE-2019-20337.htmlhttps://patchthecve.com/cve/CVE-2019-20337.htmlWed, 17 Jun 2026 02:30:16 +0000HIGH 7.2: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.CVE-2019-20336: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerabhttps://patchthecve.com/cve/CVE-2019-20336.htmlhttps://patchthecve.com/cve/CVE-2019-20336.htmlWed, 17 Jun 2026 02:30:16 +0000MEDIUM 6.1: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.CVE-2018-15189: PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.https://patchthecve.com/cve/CVE-2018-15189.htmlhttps://patchthecve.com/cve/CVE-2018-15189.htmlWed, 17 Jun 2026 01:42:12 +0000MEDIUM 5.4: PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.CVE-2018-15188: PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page https://patchthecve.com/cve/CVE-2018-15188.htmlhttps://patchthecve.com/cve/CVE-2018-15188.htmlWed, 17 Jun 2026 01:42:12 +0000MEDIUM 6.5: PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.CVE-2018-15187: PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.https://patchthecve.com/cve/CVE-2018-15187.htmlhttps://patchthecve.com/cve/CVE-2018-15187.htmlWed, 17 Jun 2026 01:42:12 +0000HIGH 8.0: PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.CVE-2018-5078: Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.https://patchthecve.com/cve/CVE-2018-5078.htmlhttps://patchthecve.com/cve/CVE-2018-5078.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.CVE-2018-5077: Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.https://patchthecve.com/cve/CVE-2018-5077.htmlhttps://patchthecve.com/cve/CVE-2018-5077.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.CVE-2018-5076: Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.https://patchthecve.com/cve/CVE-2018-5076.htmlhttps://patchthecve.com/cve/CVE-2018-5076.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.CVE-2018-5075: Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.https://patchthecve.com/cve/CVE-2018-5075.htmlhttps://patchthecve.com/cve/CVE-2018-5075.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.CVE-2018-5074: Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.https://patchthecve.com/cve/CVE-2018-5074.htmlhttps://patchthecve.com/cve/CVE-2018-5074.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.CVE-2018-5073: Online Ticket Booking has CSRF via admin/movieedit.php.https://patchthecve.com/cve/CVE-2018-5073.htmlhttps://patchthecve.com/cve/CVE-2018-5073.htmlWed, 17 Jun 2026 01:59:34 +0000MEDIUM 6.8: Online Ticket Booking has CSRF via admin/movieedit.php.CVE-2018-5072: Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.https://patchthecve.com/cve/CVE-2018-5072.htmlhttps://patchthecve.com/cve/CVE-2018-5072.htmlWed, 17 Jun 2026 01:59:33 +0000MEDIUM 4.8: Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.CVE-2017-17603: Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchthttps://patchthecve.com/cve/CVE-2017-17603.htmlhttps://patchthecve.com/cve/CVE-2017-17603.htmlWed, 17 Jun 2026 01:11:21 +0000CRITICAL 9.8: Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.