CVE-2017-17629

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17594

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17571

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

SQL Injection Vulnerability in Diyou p2p Lending System V4.1

Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...

Shenzhen Tiandixin Network Technology Co., Ltd. website building system has SQL injection vulnerability

Shenzhen Tiandixin Network Technology Co., Ltd, referred to as "Tiandixin Network", is a integration of planning, design, production, program development, SEO optimization, network marketing training in one of the network service companies. Shenzhen Tiandixin Network Technology Co., Ltd. has a SQ...

SQL Injection Vulnerability in DSmall Multi-User Mall System

DSmall multi-user mall system is a platform mall system developed by DSmall Network for enterprise-level customers with multiple suppliers and stores, which can realize the modes of platform self-owned and third-party merchants at the same time. There is a SQL injection vulnerability in DSmall...

Tpshop Mall Member Center Multiple SQL Injection Vulnerabilities

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . Tpshop mall member center in many places there are SQL injection vulnerabilities. Attackers can use the vulnerability to obtain sensitiv...

SQL injection vulnerability in foods_order.class.php page of UQCMS Cloud B2B2C multi-store system

B2B2C multi-store system is a B2B2C e-commerce software with PHP+MYSQL program and smarty template. A SQL injection vulnerability exists in the goodsorder.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System. The vulnerability stems from the fact that the program does not adequatel...

EyesOfNetwork add_modify_group.php SQL Injection Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

SQL injection vulnerability in the game.php page of UX365 website category navigation system

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the game.php page of the Uke365 Web Classifie...

DSMmall Multi-merchant open source mall system get_subject_by_typeid method SQL injection vulnerability

DSMmall multi-commercial open source mall source code is a thinkPHP as the framework for the development of multi-user mall system source code. DSMmall multi merchant open source mall system getsubjectbytypeid method SQL injection vulnerability. The vulnerability is due to the system fails to...

NiuShop open source mall system Goods.php page with SQL injection vulnerability (CNVD-2017-36959)

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...

Piwigo SQL Injection Vulnerability

Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in Piwigo 2.9.2 and prior versions. A remote authenticated attacker can exploit the vulnerability to obtain information in the context of a user that the application uses to retrieve data from a databa...

Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

Overview A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Yuuta Watanabe...