PatchTheCVE: entrepreneur job portal scripthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-20643: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listihttps://patchthecve.com/cve/CVE-2018-20643.htmlhttps://patchthecve.com/cve/CVE-2018-20643.htmlWed, 17 Jun 2026 01:53:15 +0000MEDIUM 6.5: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.CVE-2018-20642: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (ouhttps://patchthecve.com/cve/CVE-2018-20642.htmlhttps://patchthecve.com/cve/CVE-2018-20642.htmlWed, 17 Jun 2026 01:53:14 +0000MEDIUM 6.5: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.CVE-2018-20641: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profihttps://patchthecve.com/cve/CVE-2018-20641.htmlhttps://patchthecve.com/cve/CVE-2018-20641.htmlWed, 17 Jun 2026 01:53:14 +0000HIGH 8.8: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.CVE-2018-20640: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name https://patchthecve.com/cve/CVE-2018-20640.htmlhttps://patchthecve.com/cve/CVE-2018-20640.htmlWed, 17 Jun 2026 01:53:14 +0000MEDIUM 5.4: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.CVE-2018-20639: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.https://patchthecve.com/cve/CVE-2018-20639.htmlhttps://patchthecve.com/cve/CVE-2018-20639.htmlWed, 17 Jun 2026 01:53:14 +0000MEDIUM 6.1: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.CVE-2018-7469: PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field tohttps://patchthecve.com/cve/CVE-2018-7469.htmlhttps://patchthecve.com/cve/CVE-2018-7469.htmlWed, 17 Jun 2026 02:03:10 +0000MEDIUM 4.8: PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field to admin/categories_industry.php (aka Categories - Industry Type).CVE-2017-17596: Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.https://patchthecve.com/cve/CVE-2017-17596.htmlhttps://patchthecve.com/cve/CVE-2017-17596.htmlWed, 17 Jun 2026 01:11:20 +0000CRITICAL 9.8: Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.