VendorsAdvanced Real Estate Script Projectadvanced_real_estate_script4.0.9
Vulnerabilities

Advanced Real Estate Script Project Advanced Real Estate Script 4.0.9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2018-15187
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
Published 2018-08-10 · Modified
8.0EPSS 0.005
CVE-2019-20337
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
Published 2020-01-05 · Modified
7.2EPSS 0.010
CVE-2018-15188
PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.
Published 2018-08-10 · Modified
6.5EPSS 0.009
CVE-2019-20336
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
Published 2020-01-05 · Modified
6.1EPSS 0.007
CVE-2018-15189
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
Published 2018-08-10 · Modified
5.4EPSS 0.005