CVE-2017-17585: Improper Neutralization of Special Elements used in an SQL Command

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

PT-2017-14880

Name of the Vulnerable Software and Affected Versions FS Monster Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the Employer Details.php file. Recommendations For FS Monster Clone version 1.0, avoid using the id parameter in the...

PT-2017-14879

Name of the Vulnerable Software and Affected Versions FS Makemytrip Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "show-flight-result.php" endpoint, specifically through the fl orig or fl dest parameters. Recommendations For FS Makemytrip Clon...

CVE-2017-17590: Improper Neutralization of Special Elements used in an SQL Command

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...

CVE-2017-17641: Improper Neutralization of Special Elements used in an SQL Command

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

CVE-2017-17582: Improper Neutralization of Special Elements used in an SQL Command

FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17581: Improper Neutralization of Special Elements used in an SQL Command

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17588: Improper Neutralization of Special Elements used in an SQL Command

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17583: Improper Neutralization of Special Elements used in an SQL Command

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...

CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command

FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...

PT-2017-14876

Name of the Vulnerable Software and Affected Versions FS Quibids Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the productid parameter in the itechd.php file. Recommendations For FS Quibids Clone version 1.0, consider restricting access to the...

PT-2017-14865

Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...

PT-2017-14913

Name of the Vulnerable Software and Affected Versions Foodspotting Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the quicksearch.php API endpoint, specifically through the q parameter. This allows for potential exploitation. Recommendations For...

CVE-2017-17618: Improper Neutralization of Special Elements used in an SQL Command

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...

PT-2017-14901

Name of the Vulnerable Software and Affected Versions Consumer Complaints Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "other-user-profile.php" file. Recommendations For Consumer Complaints Clone Script version 1.0, avoid usi...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17638: Improper Neutralization of Special Elements used in an SQL Command

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

PT-2017-14914

Name of the Vulnerable Software and Affected Versions Kickstarter Clone Script version 2.0 Description The issue is related to SQL Injection, which occurs via the projid parameter in the investcalc.php file. Recommendations For Kickstarter Clone Script version 2.0, avoid using the projid paramete...

Groupon Clone Script 3.01 SQL Injection

Exploit Title: Groupon Clone Script 3.01 - 'stateid' 's' SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Version: 3.01 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...