3096 matches found
CVE-2017-17638
Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...
CVE-2017-17612
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...
CVE-2017-17585
FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...
CVE-2017-17581
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17618
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...
CVE-2017-17573
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17574
CVE-2017-17574 affects FS Care Clone 1.0, a PHP/MySQL-based online booking script. The vulnerability is a SQL injection in the searchJob.php endpoint, exploitable via the parameters jobType or jobFrequency . The issue stems from unsafe handling of these inputs, enabling command execution against ...
CVE-2017-17582
FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...
CVE-2017-17641
CVE-2017-17641 affects Resume Clone Script 2.0.5, with a SQL injection in the preview.php id parameter. The root cause is an unsafely constructed SQL query using the id input, allowing a remote attacker to inject commands and potentially access or alter the database (Impact: partial to high in co...
CVE-2017-17586
FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...
CVE-2017-17580
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
CVE-2017-17590
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...
CVE-2017-17577
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
CVE-2017-17583
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...
CVE-2017-17605
The CVE-2017-17605 vulnerability affects the Consumer Complaints Clone Script 1.0, with an SQL Injection in the other-user-profile.php?id parameter. Root cause is unsafe handling of the id parameter, enabling a remote attacker to manipulate queries. Impact is high (confidentiality/integrity/avail...
CVE-2017-17597
Observation: CVE-2017-17597 affects Nearbuy Clone Script 3.2. Root cause: SQL injection via the category_list.php search parameter, as confirmed by CNVD-2017-37210 and NVD records. Impact: allows SQL commands to be injected; CVSS reports indicate high severities (base scores up to 9.8/CRITICAL). ...
CVE-2017-17584
CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...
CVE-2017-17575
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...
CVE-2017-17615
CVE-2017-17615 affects Facebook Clone Script 1.0 (PHP Scripts Mall Facebook Clone Script). The vulnerability is an SQL injection in friend-profile.php via the id parameter, allowing remote command injection with the potential to access/modify data (as stated by CNVD/NVD); exploits exist (e.g., Ex...