Vendors / Chartered Accountant Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Chartered Accountant records in CISA KEV No Chartered Accountant vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2018-08-10 · No fix listed CWE-352
Priority LOW 32
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01425 · Published 2019-03-20 · No fix listed CWE-22
Priority LOW 32
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01581 · Published 2019-03-20 · No fix listed CWE-119
Priority LOW 29
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00856 · Published 2018-07-09 · No fix listed CWE-79
Priority LOW 25
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00641 · Published 2019-06-06 · No fix listed CWE-79
Priority LOW 25
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2019-03-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 5 0 0
THREATIST.IORead the docs