CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17615

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

CVE-2017-17578

CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...

PT-2017-14911

Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...

CVE-2017-17594: Improper Neutralization of Special Elements used in an SQL Command

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...

CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

PT-2017-14863

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...

PT-2017-14896

Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...

PT-2017-14873

Name of the Vulnerable Software and Affected Versions FS Crowdfunding Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "latest news details.php" API endpoint. Recommendations For FS Crowdfunding Script version 1.0, consider restricting...

PT-2017-14889

Name of the Vulnerable Software and Affected Versions DomainSale PHP Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "domain.php" endpoint. Recommendations For DomainSale PHP Script version 1.0, avoid using the id parameter in the...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

PT-2017-14478

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to create arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...

CVE-2017-17600: Improper Neutralization of Special Elements used in an SQL Command

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

PT-2017-14937

Name of the Vulnerable Software and Affected Versions Resume Clone Script version 2.0.5 Description The issue is related to SQL Injection, which occurs via the id parameter in the "preview.php" API endpoint. Recommendations For Resume Clone Script version 2.0.5, consider restricting access to the...

CVE-2017-17569: Improper Neutralization of Input During Web Page Generation

Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17585: Improper Neutralization of Special Elements used in an SQL Command

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

CVE-2017-17641: Improper Neutralization of Special Elements used in an SQL Command

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

PT-2017-14861

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to SQL Injection, which occurs via the ID parameter in the "admin/user activate submit.php" API endpoint. Recommendations For Scubez Posty...

PT-2017-14489

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to overwrite arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...

CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...