Chartered Accountant \ Auditor Website Project
6 CVEs affecting Chartered Accountant \ Auditor Website Project. Latest disclosed: 2019-06-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15186 | High | 8.8 | 2018-08-10 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php. |
CVE-2018-20638 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an asset… |
CVE-2018-20637 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted Ja… |
CVE-2018-13256 | Medium | 6.1 | 2018-07-09 | PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter. |
CVE-2019-7553 | Medium | 5.4 | 2019-06-06 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field. |
CVE-2018-20636 | Medium | 5.4 | 2019-03-21 | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field. |