4175 matches found
CVE-2017-17612
The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17621
CVE-2017-17621 affects the Multivendor Penny Auction Clone Script 1.0. The connected sources document a SQL Injection vulnerability that can be triggered via PATH_INFO to the /detail URI, allowing an attacker to inject SQL commands remotely (no authentication required per the CVE data). Several r...
CVE-2017-17585
FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...
CVE-2017-17617
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...
CVE-2017-17570
FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...
CVE-2017-17577
FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...
CVE-2017-17605
The CVE-2017-17605 vulnerability affects the Consumer Complaints Clone Script 1.0, with an SQL Injection in the other-user-profile.php?id parameter. Root cause is unsafe handling of the id parameter, enabling a remote attacker to manipulate queries. Impact is high (confidentiality/integrity/avail...
CVE-2017-17589
FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...
CVE-2017-17573
CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...
CVE-2017-17574
CVE-2017-17574 affects FS Care Clone 1.0, a PHP/MySQL-based online booking script. The vulnerability is a SQL injection in the searchJob.php endpoint, exploitable via the parameters jobType or jobFrequency . The issue stems from unsafe handling of these inputs, enabling command execution against ...
CVE-2017-17615
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17597
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
CVE-2017-17586
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17618
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...
CVE-2017-17612
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...
CVE-2017-17585
FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...