6 matches found
EUVD-2017-8736
Malware in sbrugna...
CVE-2017-17578
FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...
Sql injection
FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...
CVE-2017-17578
CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...
PT-2017-14873
Name of the Vulnerable Software and Affected Versions FS Crowdfunding Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "latest news details.php" API endpoint. Recommendations For FS Crowdfunding Script version 1.0, consider restricting...