professional service script vulnerabilities and fixes

Recent CVEs affecting professional service script, with upgrade or downgrade steps. 7 tracked.

Also searched as: professionalservicescript.

professional service script has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17928 (score 61/100).

CVE-2017-17930 HIGH 8.8 MITIGATE PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by mod
CVE-2017-17929 MEDIUM 4.8 MITIGATE PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
CVE-2017-17928 CRITICAL 9.8 MITIGATE PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
CVE-2017-17927 MEDIUM 5.3 MITIGATE PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information
CVE-2017-17926 MEDIUM 5.3 MITIGATE PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remo
CVE-2017-17925 MEDIUM 4.8 MITIGATE PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parame
CVE-2017-17924 MEDIUM 5.3 MITIGATE PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information

FAQ

How do I fix professional service script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is professional service script being exploited right now?

None of the tracked professional service script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which professional service script CVE should I patch first?

CVE-2017-17928 currently ranks highest (61/100): PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter..

RSS feed for professional service script · ← Back to latest CVEs