Vulnerabilities

TI-2018-10868 CVE-2018-15185 · GHSA-wqp8-r4fm-6p49

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to…

LOW 31

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service (page update outage) via crafted PHP and JavaScript code in the "Current Position" field.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00938 Published 2018-08-10 No fix listed CWE-20

TI-2018-10867 CVE-2018-15184 · GHSA-cpfg-m6hm-7jj4

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the…

LOW 25

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2018-08-09 No fix listed CWE-79

TI-2018-08233 CVE-2018-11514 · GHSA-vp58-jf8j-hfgm

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File…

MEDIUM 40

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changing .docx to .php.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01088 Published 2018-05-28 No fix listed CWE-434

TI-2018-04970 CVE-2018-6795 · GHSA-369v-xrvc-8m87

PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.

LOW 25

PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00543 Published 2018-02-07 No fix listed CWE-79

Vulnerabilities

Filters

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to…

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the…

PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File…

PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.