CVE-2017-17615

CVE-2017-17615 affects Facebook Clone Script 1.0 (PHP Scripts Mall Facebook Clone Script). The vulnerability is an SQL injection in friend-profile.php via the id parameter, allowing remote command injection with the potential to access/modify data (as stated by CNVD/NVD); exploits exist (e.g., Ex...

CVE-2017-17615

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

PT-2017-14911

Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...

Man-in-the-Middle (MitM)

botkit is vulnerable to man-in-the-middle MitM attacks. The library does not implement an app secret proof parameter when connecting to the Facebook API, allowing a malicious user who has a stolen app token to send messages from the chat bot's behalf...

Facebook Clone Script 1.0 - id / send SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/facebook-clone/ Demo:...

Facebook Clone Script 1.0 - id send SQL Injection

Facebook Clone Script 1.0 - id send SQL Injection Exploit Title: Facebook Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/facebook-clone/ Demo:...

Facebook Clone Script 1.0 SQL Injection

Exploit Title: Facebook Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/facebook-clone/ Demo: http://smsemailmarketing.in/demo/fbclone/ Version: 1.0 Category: Webapps Tested on:...

Facebook Clone Script 1.0 - 'id' / 'send' SQL Injection

Exploit Title: Facebook Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/facebook-clone/ Demo: http://smsemailmarketing.in/demo/fbclone/ Version: 1.0 Category: Webapps Tested on:...

facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-450497 Description| Value ---|--- Affected Website:| facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...

hi-in.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-450436 Description| Value ---|--- Affected Website:| hi-in.facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

pt-br.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-450435 Description| Value ---|--- Affected Website:| pt-br.facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

prod.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-449917 Description| Value ---|--- Affected Website:| prod.facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

apps.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-449916 Description| Value ---|--- Affected Website:| apps.facebook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

business.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-449914 Description| Value ---|--- Affected Website:| business.facebook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

FS Facebook Clone - token SQL Injection

FS Facebook Clone - token SQL Injection Exploit Title: FS Facebook Clone - 'token' SQL Injection Date: 2017-12-06 Exploit Author: Dan° Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/facebook-clone/ Version: 2017-12-06 Tested on: Kali Linux 2.0 PoC:...

FS Facebook Clone - 'token' SQL Injection

Exploit Title: FS Facebook Clone - 'token' SQL Injection Date: 2017-12-06 Exploit Author: Dan° Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/facebook-clone/ Version: 2017-12-06 Tested on: Kali Linux 2.0 PoC: SQL Injection on GET parameter = token...

my-mm.facebook.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-449579 Description| Value ---|--- Affected Website:| my-mm.facebook.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

FS Facebook Clone - token SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FS Facebook Clone - 'token' SQL Injection Date: 2017-12-06 Exploit Author: Dan° Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/facebook-clone/ Version: 2017-12-06 Tested on: Kali...

FS Facebook Clone SQL Injection

Exploit Title: FS Facebook Clone - 'token' SQL Injection Date: 2017-12-06 Exploit Author: DanAdeg Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/facebook-clone/ Version: 2017-12-06 Tested on: Kali Linux 2.0 PoC: SQL Injection on GET parameter = toke...