315 matches found
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
Sql injection
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17111
CVE-2017-17111 affects Posty Readymade Classifieds Script 1.0. Affected component: listings.php (catid parameter) and ads-details.php (ID parameter). Root cause: SQL injection due to insufficient input validation/sanitization in those endpoints, enabling an attacker to inject SQL commands via the...
CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...
Readymade Classifieds Script 1.0 - SQL Injection
Readymade Classifieds Script 1.0 - SQL Injection Exploit Title: Readymade Classifieds Script 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.posty.in/index.html Demo: http://www.posty.in/readymade-classifieds-demo.html Version: 1.0...
architectureforsale.com XSS vulnerability
Vulnerable URL: http://architectureforsale.com/property-details.php?propertyID=1"...
Cross site scripting
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...
CVE-2017-9360
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...
CVE-2017-9360
WebsiteBaker v2.10.0 is affected by a SQL injection in /account/details.php. The CNVD entry confirms a remote attacker can exploit this to execute arbitrary SQL commands, implying severe impact on confidentiality, integrity, and possibly availability. The CVE entry itself notes a SQL injection vu...
CVE-2017-9360: Improper Neutralization of Special Elements used in an SQL Command
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...
CVE-2017-9361: Improper Neutralization of Input During Web Page Generation
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...
tokinosumika.com XSS vulnerability
Vulnerable URL: http://www.tokinosumika.com/hamamatsufp/eventinfo/details.php?id="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 287194 VIP website status:| No Check...
fabulosgloria.com XSS vulnerability
Vulnerable URL: http://www.fabulosgloria.com/details.php?id=502"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3170103 VIP website status:| No Check...
assuredtelematics.com XSS vulnerability
Vulnerable URL: http://www.assuredtelematics.com/blog-details.php?id=834"alert/OPENBUGBOUNTY/...
gravegarden.org XSS vulnerability
Vulnerable URL: http://www.gravegarden.org/diuguid/details.php?id=7355...
Entrepreneur B2B Script 2.0.4 - id SQL Injection
Entrepreneur B2B Script 2.0.4 - id SQL Injection Exploit Title: Entrepreneur B2B Script v2.0.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/entrepreneur-b2b-script/ Demo:...
Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01854)
B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'id' field in the buyleads-details.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from...
