Advanced Real Estate Script Project

13 CVEs across 1 Advanced Real Estate Script Project products. Browse Advanced Real Estate Script Project vulnerabilities, severities, and proof-of-concept exploits.

Advanced Real Estate Script Project products with known CVEs

ProductCVEs
Advanced Real Estate Script13
Advanced Real Estate Script Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-20337High7.22020-01-05In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
CVE-2019-20336Medium6.12020-01-05In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
CVE-2018-15189Medium5.42018-08-10PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
CVE-2018-15188Medium6.52018-08-10PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in th…
CVE-2018-15187High8.02018-08-10PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
CVE-2018-5078Medium4.82018-01-03Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.
CVE-2018-5077Medium4.82018-01-03Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.
CVE-2018-5076Medium4.82018-01-03Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.
CVE-2018-5075Medium4.82018-01-03Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.
CVE-2018-5074Medium4.82018-01-03Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.
CVE-2018-5073Medium6.82018-01-03Online Ticket Booking has CSRF via admin/movieedit.php.
CVE-2018-5072Medium4.82018-01-03Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.
CVE-2017-17603Critical9.82017-12-13Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.