1021 matches found
Sql injection
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
CVE-2017-17580
CVE-2017-17580 affects FS Linkedin Clone 1.0 and is a SQL Injection vulnerability exploitable via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. The issue is evidenced by CVSS metrics (2.0: base score 7.5, PARTIAL impacts; 3.1: base score 9.8, HIGH i...
CVE-2017-17579
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
CVE-2017-17579
CVE-2017-17579 affects FS Freelancer Clone 1.0 (PHP/MySQL). Multiple connected sources confirm a SQL Injection vulnerability in profile.php with the u parameter (remote exploitation possible). Root cause is unsafely handled input leading to SQL commands being injected. In the CNVD/CNVD-2017-37404...
CVE-2017-17615
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
PT-2017-14874
Name of the Vulnerable Software and Affected Versions FS Freelancer Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the u parameter in the "profile.php" endpoint. Recommendations For FS Freelancer Clone version 1.0, consider restricting access to th...
PT-2017-14888
Name of the Vulnerable Software and Affected Versions Simple Chatting System version 1.0 Description The issue allows for Arbitrary File Upload through the "view/my profile.php" endpoint, which stores uploaded files in the "uploads/" directory. Recommendations For Simple Chatting System version...
PT-2017-14901
Name of the Vulnerable Software and Affected Versions Consumer Complaints Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "other-user-profile.php" file. Recommendations For Consumer Complaints Clone Script version 1.0, avoid usi...
CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
PT-2017-14875
Name of the Vulnerable Software and Affected Versions FS Linkedin Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include grid in "group.php", fid in "profile.php", and id in "company...
PT-2017-14911
Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...
PT-2017-14446
Name of the Vulnerable Software and Affected Versions Ingenious School Management System version 2.3.0 Description The issue concerns a SQL injection vulnerability. Specifically, it is vulnerable to Boolean-based and Time-based SQL injection in the friend index parameter of a GET request to the...
indivibe.com XSS vulnerability
Vulnerable URL: http://www.indivibe.com/profile.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2283335 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...
PT-2017-14310
Name of the Vulnerable Software and Affected Versions Ingenious School Management System version 2.3.0 Description The issue allows a student or teacher to upload an arbitrary file through the my profile.php script. Recommendations For Ingenious School Management System version 2.3.0, restrict...
pixelitist.com XSS vulnerability
Vulnerable URL: http://pixelitist.com/profile.php?id=13'"150 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...
law.knu.ac.kr XSS vulnerability
Vulnerable URL: http://law.knu.ac.kr/greeting/profile.php?id=%22%3EKeritzy%3Cimg%20src=x%20onerror=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
collegesearch.in XSS vulnerability
Vulnerable URL: https://www.collegesearch.in/send-profile.php?instituteid=2405%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details...