Advanced Real Estate Script Project

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Advanced Real Estate Script Project records in CISA KEV

No Advanced Real Estate Script Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Real Estate Script 13 records MEDIUM

Records

13 records in Advanced Real Estate Script · all components

TI-2017-12874 CVE-2017-17603 · GHSA-cc7m-mmgh-5xj6

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php…

MEDIUM 48

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

TI-2018-10870 CVE-2018-15187 · GHSA-xr2c-4prw-6479

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.

LOW 35

PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00452 Published 2018-08-10 No fix listed CWE-352

TI-2019-14592 CVE-2019-20337 · GHSA-96gf-5wrp-5gwp

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id…

LOW 34

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0104 Published 2020-01-05 No fix listed CWE-89

TI-2018-10871 CVE-2018-15188 · GHSA-fpxv-w2jp-mwfq

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a…

LOW 31

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00938 Published 2018-08-10 No fix listed CWE-119

TI-2018-03640 CVE-2018-5073 · GHSA-2chj-gvq8-9cpr

Online Ticket Booking has CSRF via admin/movieedit.php.

LOW 30

Online Ticket Booking has CSRF via admin/movieedit.php.

CVSS 3.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00397 Published 2018-01-03 No fix listed CWE-352

TI-2019-14591 CVE-2019-20336 · GHSA-c6hx-6fwx-2855

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.

LOW 28

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-01-05 No fix listed CWE-79

TI-2018-10872 CVE-2018-15189 · GHSA-vwm5-h778-c3rw

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.

LOW 25

PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2018-08-10 No fix listed CWE-79

TI-2018-03645 CVE-2018-5078 · GHSA-c2q5-rw42-v229