Approved changes feed: RSS · Atom

cpe:2.3:a:advanced_real_estate_script_project:advanced_real_estate_script:4.0.9:*:*:*:*:*:*:*

part: a version: 4.0.9 update: *

VendorAdvanced Real Estate Script Project (5b304847-b888-5578-ba86-99d7e1a2223a)
ProductAdvanced Real Estate Script (e63b1bd7-27a0-570e-a8bb-4f5b2edf1b01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20337 vulnerable 2026-06-08 05:13:40.458262 Details available
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
Published: 2020-01-05T21:06:40.000Z
Updated: 2024-08-05T02:39:09.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20336 vulnerable 2026-06-08 05:13:40.457783 Details available
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
Published: 2020-01-05T21:06:57.000Z
Updated: 2024-08-05T02:39:09.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15189 vulnerable 2026-06-08 05:10:53.882248 Details available
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
Published: 2018-08-10T15:00:00.000Z
Updated: 2024-08-05T09:46:25.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15188 vulnerable 2026-06-08 05:10:53.881951 Details available
PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile.
Published: 2018-08-10T15:00:00.000Z
Updated: 2024-08-05T09:46:25.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15187 vulnerable 2026-06-08 05:10:53.881346 Details available
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
Published: 2018-08-10T15:00:00.000Z
Updated: 2024-08-05T09:46:25.454Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.