Known Vulnerabilities for products from Advanced Real Estate Script Project
Listed below are 13 of the newest known vulnerabilities associated with the vendor "Advanced Real Estate Script Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-20337 json | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection. | 7.2 - HIGH | 2020-01-05 | 2020-01-09 |
| CVE-2019-20336 json | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS. | 6.1 - MEDIUM | 2020-01-05 | 2020-01-09 |
| CVE-2018-15189 json | PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile. | 5.4 - MEDIUM | 2018-08-10 | 2018-10-05 |
| CVE-2018-15188 json | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss)... | 6.5 - MEDIUM | 2018-08-10 | 2018-10-09 |
| CVE-2018-15187 json | PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php. | 8 - HIGH | 2018-08-10 | 2018-10-05 |
| CVE-2018-5078 json | Online Ticket Booking has XSS via the admin/eventlist.php cast parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-16 |
| CVE-2018-5077 json | Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-17 |
| CVE-2018-5076 json | Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-17 |
| CVE-2018-5075 json | Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-12 |
| CVE-2018-5074 json | Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-16 |
| CVE-2018-5073 json | Online Ticket Booking has CSRF via admin/movieedit.php. | 6.8 - MEDIUM | 2018-01-03 | 2018-01-17 |
| CVE-2018-5072 json | Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter. | 4.8 - MEDIUM | 2018-01-03 | 2018-01-16 |
| CVE-2017-17603 json | Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price... | Not Provided | 2017-12-13 | 2025-04-20 |
Known software with vulnerabilities from Advanced Real Estate Script Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Advanced Real Estate Script Project | Advanced Real Estate Script | - |