Back to Database
Status published
Medium
CVE-2018-20637
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows...
Vulnerability Description
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20637
Credits & Attribution
No credits recorded in the NVD database.
More from chartered accountant \
View All →CVE-2019-7553
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has...
Medium
5.4
CVE-2018-20638
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has...
Medium
6.5
CVE-2018-20636
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has...
Medium
5.4
CVE-2018-15186
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has...
High
8.8
CVE-2018-13256
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the...
Medium
6.1
Affected Vendor
chartered accountant \
View all reports →Affected Software
auditor website project
Vulnerable Versions:
chartered_accountant_\
Timeline
Official Publish:
March 20th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.