PT-2017-14866

Name of the Vulnerable Software and Affected Versions FS Foodpanda Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /food API endpoint, specifically through the keywords parameter. Recommendations For FS Foodpanda Clone version 1.0, consider...

PT-2017-14881

Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...

PT-2017-14884

Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...

PT-2017-14917

Name of the Vulnerable Software and Affected Versions Multivendor Penny Auction Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the "/detail" API endpoint. This allows for potential exploitation. Recommendations For Multivendor Penny...

PT-2017-14869

Name of the Vulnerable Software and Affected Versions FS Care Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the searchJob.php endpoint, specifically through the jobType or jobFrequency parameters. Recommendations For FS Care Clone version 1.0, avo...

PT-2017-14908

Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...

PT-2017-14874

Name of the Vulnerable Software and Affected Versions FS Freelancer Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the u parameter in the "profile.php" endpoint. Recommendations For FS Freelancer Clone version 1.0, consider restricting access to th...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

PT-2017-14937

Name of the Vulnerable Software and Affected Versions Resume Clone Script version 2.0.5 Description The issue is related to SQL Injection, which occurs via the id parameter in the "preview.php" API endpoint. Recommendations For Resume Clone Script version 2.0.5, consider restricting access to the...

PT-2017-14878

Name of the Vulnerable Software and Affected Versions FS Shutterstock Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /Category endpoint. Recommendations For FS Shutterstock Clone version 1.0, avoid using the keywords...

PT-2017-14934

Name of the Vulnerable Software and Affected Versions Groupon Clone Script version 3.01 Description The issue is related to SQL Injection, which can be exploited via the state id parameter in the "city ajax.php" endpoint. Recommendations For Groupon Clone Script version 3.01, update the script to...

CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...

CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

PT-2017-14868

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...

PT-2017-14883

Name of the Vulnerable Software and Affected Versions FS IMDB Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are f in 'movie.php', s in 'tvshow.php', and id in 'show misc video.php'...

CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...