Vulnerabilities

TI-2019-05291 CVE-2019-7431 · GHSA-3vqq-mcf6-8w3j

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request…

LOW 32

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05290 CVE-2019-7430 · GHSA-4gqx-rf75-h3xh

LOW 26

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01043 Published 2019-03-20 No fix listed CWE-79

TI-2018-05038 CVE-2018-6902 · GHSA-h3fm-9x6m-vjmr

LOW 25

PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-12 No fix listed CWE-79