2942 matches found
CVE-2017-17581
FS Quibids Clone 1.0 is affected by an SQL injection in the itechd.php productid parameter. Multiple sources (CNVD-2017-37406, NVD entry) confirm a SQL injection vulnerability with remote exploitation. Exploit-DB references a posted exploit for this issue. No official patch/version details are pr...
CVE-2017-17573
CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...
CVE-2017-17577
FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...
CVE-2017-17585
FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...
CVE-2017-17571
FS Foodpanda Clone 1.0 (PHP CodeIgniter) contains a SQL injection vulnerability in the /food keywords parameter. A remote attacker can inject SQL commands due to improper input handling in this parameter, as described in CNVD-2017-37402 and corroborated by NVD entries referencing the same vector....
CVE-2017-17578
CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...
CVE-2017-17576
FS Gigs Script 1.0 contains an SQL Injection vulnerability in browse-category.php (cat), browse-scategory.php (sc), and service-provider.php (ser). The root cause is unsanitized input parameters, enabling the execution of arbitrary SQL commands on the backend. Affected software is FS Gigs Script ...
CVE-2017-17581: Improper Neutralization of Special Elements used in an SQL Command
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
PT-2017-14885 · Fs · Fs Stackoverflow Clone
Name of the Vulnerable Software and Affected Versions: FS Stackoverflow Clone version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/question" API endpoint, specifically through the keywords parameter. This allows for potential unauthorized access to...
CVE-2017-17571: Improper Neutralization of Special Elements used in an SQL Command
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17588: Improper Neutralization of Special Elements used in an SQL Command
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...
CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17590: Improper Neutralization of Special Elements used in an SQL Command
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...
CVE-2017-17574: Improper Neutralization of Special Elements used in an SQL Command
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter...
CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
Qualys Security Advisory - GNU C Library Memory Leak / Buffer Overflow
Qualys Security Advisory Buffer overflow in glibc's ld.so ======================================================================== Contents ======================================================================== Summary Memory Leak Buffer Overflow Exploitation Acknowledgments...