FS Freelancer Clone SQL Injection Vulnerability

FS Freelancer Clone is a set of PHP and MySQL based scripts for freelancer online job search and recruitment websites. A SQL injection vulnerability exists in FS Freelancer Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'u' paramete...

FS Grubhub Clone SQL Injection Vulnerability

FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

PHP Scripts Mall Facebook Clone Script SQL Injection Vulnerability

PHP Scripts Mall Facebook Clone Script is a set of PHP based social networking site scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Facebook Clone Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sendi...

PHP Scripts Mall E-commerce MLM Software SQL Injection Vulnerability

PHP Scripts Mall E-commerce MLM Software is a PHP based e-commerce online marketing system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall E-commerce MLM Software version 1.0. A remote attacker can inject SQL into the PHP Scripts Mall E-commerce MLM Software...

DomainSale PHP Script SQL Injection Vulnerability

DomainSale PHP Script is a set of scripts for online domain name selling websites based on PHP and MySQL. A SQL injection vulnerability exists in DomainSale PHP Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the...

FS Crowdfunding Script SQL Injection Vulnerability

FS Crowdfunding Script is a set of scripts for online crowdfunding websites based on PHP and MySQL. A SQL injection vulnerability exists in FS Crowdfunding Script version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the latestnewsdetails.php file to inject...

PHP Scripts Mall Child Care Script SQL Injection Vulnerability

PHP Scripts Mall Child Care Script is a PHP based daycare, kindergarten online management, booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Child Care Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city'...

CVE-2017-5663

In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to...

Joomla JBuildozer Component SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search, etc. JBuildozer extension is used in one of the Joomla! Joomla JBuildozer component SQL injection vulnerability. A remote attacker can exploit this...

CVE-2017-17648

Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...

CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

CVE-2017-17629

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17594

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...

CVE-2017-17571

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...