website seller script project vulnerabilities

Recent CVEs affecting website seller script project products. 7 tracked.

website seller script project has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2018-6879 (score 52/100).

• CVE-2018-6879 HIGH 8.8 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address,
• CVE-2018-6870 MEDIUM 6.1 DOWNGRADE Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.
• CVE-2018-20631 MEDIUM 5.3 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image
• CVE-2018-20530 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related is
• CVE-2018-15897 MEDIUM 6.5 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted
• CVE-2018-15896 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
• CVE-2018-11501 HIGH 8.8 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.

FAQ

How do I fix website seller script project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is website seller script project being exploited right now?

None of the tracked website seller script project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which website seller script project CVE should I patch first?

CVE-2018-6879 currently ranks highest (52/100): PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, .

Products

• website seller script

RSS feed for website seller script project · ← Back to latest CVEs