multilanguage_real_estate_mlm_script_project - MidnightBSD Security Advisories

Advisories for multilanguage_real_estate_mlm_script_project

CVE-2018-6364 HIGH

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
multilanguage_real_estate_mlm_script_project	multilanguage_real_estate_mlm_script	*

CVE-2018-6796 LOW

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
multilanguage_real_estate_mlm_script_project	multilanguage_real_estate_mlm_script	3.0