CVE-2017-17594

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...

CVE-2017-17641

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17580

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...

CVE-2017-17569

CVE-2017-17569 affects Scubez Posty Readymade Classifieds, where the admin/user_activate_submit.php ID parameter triggers a cross-site scripting (XSS) vulnerability. The root cause is reflected XSS via the ID parameter, allowing injection of arbitrary script/HTML (CNVD-2018-00534 notes the issue ...

CVE-2017-17615

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

CVE-2017-17578

CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...

CVE-2017-17594: Improper Neutralization of Special Elements used in an SQL Command

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...

PT-2017-14863

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...

PT-2017-14896

Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...

PT-2017-14478

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to create arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

CVE-2017-17600: Improper Neutralization of Special Elements used in an SQL Command

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

PT-2017-14937

Name of the Vulnerable Software and Affected Versions Resume Clone Script version 2.0.5 Description The issue is related to SQL Injection, which occurs via the id parameter in the "preview.php" API endpoint. Recommendations For Resume Clone Script version 2.0.5, consider restricting access to the...

CVE-2017-17569: Improper Neutralization of Input During Web Page Generation

Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17585: Improper Neutralization of Special Elements used in an SQL Command

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

PT-2017-14901

Name of the Vulnerable Software and Affected Versions Consumer Complaints Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "other-user-profile.php" file. Recommendations For Consumer Complaints Clone Script version 1.0, avoid usi...

CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

CVE-2017-17641: Improper Neutralization of Special Elements used in an SQL Command

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

PT-2017-14861

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to SQL Injection, which occurs via the ID parameter in the "admin/user activate submit.php" API endpoint. Recommendations For Scubez Posty...