Vulnerabilities

TI-2019-05297 CVE-2019-7437 · GHSA-7gm9-229q-r3w7

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

LOW 29

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00848 Published 2019-03-20 No fix listed CWE-79

TI-2019-05296 CVE-2019-7436 · GHSA-c7cq-rpjm-74hm

LOW 32

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05295 CVE-2019-7435 · GHSA-rm32-gmh9-v83f

LOW 26

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01043 Published 2019-03-20 No fix listed CWE-79

TI-2017-12894 CVE-2017-17623 · GHSA-44cq-5rh2-4m77

MEDIUM 48

Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89