Sql injection

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

CVE-2017-17931: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

CVE-2017-17903: Cross-Site Request Forgery (CSRF)

FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...

CVE-2017-17904: Improper Neutralization of Input During Web Page Generation

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17931

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

CVE-2017-17931

CVE-2017-17931 affects PHP Scripts Mall Resume Clone Script. A SQL Injection via forget.php username parameter allows a remote attacker to obtain user/sensitive data. CNVDise and NVD corroborate the vulnerability; remediation/details on patches are not provided in the documents.

FS Lynda Clone Cross-Site Scripting Vulnerability

FS Lynda Clone is a video tutorial software developed with jQuery, PHP and MySQL. A cross-site scripting vulnerability exists in FS Lynda Clone. The vulnerability can be exploited to conduct cross-site scripting attacks via the keywords parameter of tutorial/ or the editprofilefirstname parameter...

CVE-2017-17904

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17903

FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...

CVE-2017-17903

CVE-2017-17903 affects FS Lynda Clone (video tutorial software) and is caused by a cross-site request forgery (CSRF) vulnerability in the /user/edit_profile endpoint, allowing an attacker to cause changes to the user panel by forging requests. The vulnerability’s impact is described in the initia...

CVE-2017-17904

FS Lynda Clone is affected by a cross-site scripting (XSS) vulnerability CVE-2017-17904. The issue arises via the keywords parameter to tutorial/ and the edit_profile_first_name parameter to user/edit_profile, enabling injected scripts to run in a victim’s browser. Sources confirm the vulnerabili...

FS Lynda Clone SQL Injection Vulnerability

FS Lynda Clone is a set of scripts for video learning websites written using the PHP Codelgniter framework. A SQL injection vulnerability exists in FS Lynda Clone version 1.0. A remote attacker can exploit the vulnerability by sending the 'keywords' parameter to tutorial/ to inject SQL commands...

Sql injection

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643

FS Lynda Clone 1.0 suffers a SQL Injection in the keywords parameter of tutorial/, enabling arbitrary SQL execution. This vulnerability is described across multiple sources (CVE-2017-17643, CNVD-2018-01351, NVD entry) and is associated with FS Lynda Clone built on PHP CodeIgniter. Public referenc...

CVE-2017-17643

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643: Improper Neutralization of Special Elements used in an SQL Command

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

PHP Scripts Mall Multivendor Penny Auction Clone Script SQL Injection Vulnerability

PHP Scripts Mall Multivendor Penny Auction Clone Script is a PHP based online auction website script from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multivendor Penny Auction Clone Script version 1.0. A remote attacker can exploit this vulnerability to inject...

FS Quibids Clone SQL Injection Vulnerability

FS Quibids Clone is a set of online auction website scripts based on PHP and MySQL. A SQL injection vulnerability exists in FS Quibids Clone version 1.0. A remote attacker can inject SQL commands by sending the 'productid' parameter to the itechd.php file...

FS Makemytrip Clone SQL Injection Vulnerability

FS Makemytrip Clone is a PHP and MySQL based vacation and travel booking system. A SQL injection vulnerability exists in FS Makemytrip Clone version 1.0. A remote attacker can inject SQL commands by sending the 'florig' or 'fldest' parameter to the show-flight-result.php file...