3910 matches found
CVE-2017-17590
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...
CVE-2017-17581
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
CVE-2017-17577
FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...
CVE-2017-17573
CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...
CVE-2017-17588
FS IMDB Clone 1.0 is affected by a SQL Injection in PHP scripts (movie.php f, tvshow.php s, show_misc_video.php id). The root cause is unsanitized input leading to injectable SQL commands, enabling potential data disclosure/modification. Exploitation details are referenced (e.g., Exploit-DB), but...
CVE-2017-17612
The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...
CVE-2017-17638
The CVE relates to Groupon Clone Script 3.01, where an SQL Injection vulnerability exists in city_ajax.php via the state_id parameter. Public references (Exploit-DB, Packet Storm) indicate a remote attacker could leverage this to inject SQL commands. The CVSS metrics indicate a high severity (AV:...
CVE-2017-17571
FS Foodpanda Clone 1.0 (PHP CodeIgniter) contains a SQL injection vulnerability in the /food keywords parameter. A remote attacker can inject SQL commands due to improper input handling in this parameter, as described in CNVD-2017-37402 and corroborated by NVD entries referencing the same vector....
CVE-2017-17581
FS Quibids Clone 1.0 is affected by an SQL injection in the itechd.php productid parameter. Multiple sources (CNVD-2017-37406, NVD entry) confirm a SQL injection vulnerability with remote exploitation. Exploit-DB references a posted exploit for this issue. No official patch/version details are pr...
CVE-2017-17585
FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...
CVE-2017-17571
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17575
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...
CVE-2017-17597
Observation: CVE-2017-17597 affects Nearbuy Clone Script 3.2. Root cause: SQL injection via the category_list.php search parameter, as confirmed by CNVD-2017-37210 and NVD records. Impact: allows SQL commands to be injected; CVSS reports indicate high severities (base scores up to 9.8/CRITICAL). ...
CVE-2017-17570
FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...
PT-2017-14885 · Fs · Fs Stackoverflow Clone
Name of the Vulnerable Software and Affected Versions: FS Stackoverflow Clone version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/question" API endpoint, specifically through the keywords parameter. This allows for potential unauthorized access to...
CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
CVE-2017-17641: Improper Neutralization of Special Elements used in an SQL Command
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...
CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...