VendorsAdvanced Real Estate Script Projectadvanced_real_estate_scriptall versions
Vulnerabilities

Advanced Real Estate Script Project Advanced Real Estate Script

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
Published 2017-12-13 · Modified
9.81 PoCEPSS 0.031
CVE-2018-15187
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
Published 2018-08-10 · Modified
8.0EPSS 0.005
CVE-2019-20337
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
Published 2020-01-05 · Modified
7.2EPSS 0.010
CVE-2018-5073
Online Ticket Booking has CSRF via admin/movieedit.php.
Published 2018-01-03 · Modified
6.8EPSS 0.004
CVE-2018-15188
PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.
Published 2018-08-10 · Modified
6.5EPSS 0.009
CVE-2019-20336
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
Published 2020-01-05 · Modified
6.1EPSS 0.007
CVE-2018-15189
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
Published 2018-08-10 · Modified
5.4EPSS 0.005
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005
CVE-2018-5074
Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005
CVE-2018-5075
Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005
CVE-2018-5076
Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005
CVE-2018-5077
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005
CVE-2018-5078
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.
Published 2018-01-03 · Modified
4.8EPSS 0.005