3398 matches found
CVE-2017-17570
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
CVE-2017-17574
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter...
CVE-2017-17571
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17577
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17615
CVE-2017-17615 affects Facebook Clone Script 1.0 (PHP Scripts Mall Facebook Clone Script). The vulnerability is an SQL injection in friend-profile.php via the id parameter, allowing remote command injection with the potential to access/modify data (as stated by CNVD/NVD); exploits exist (e.g., Ex...
CVE-2017-17577
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
CVE-2017-17579
CVE-2017-17579 affects FS Freelancer Clone 1.0 (PHP/MySQL). Multiple connected sources confirm a SQL Injection vulnerability in profile.php with the u parameter (remote exploitation possible). Root cause is unsafely handled input leading to SQL commands being injected. In the CNVD/CNVD-2017-37404...
CVE-2017-17589
FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...
CVE-2017-17584
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17579
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
CVE-2017-17621
CVE-2017-17621 affects the Multivendor Penny Auction Clone Script 1.0. The connected sources document a SQL Injection vulnerability that can be triggered via PATH_INFO to the /detail URI, allowing an attacker to inject SQL commands remotely (no authentication required per the CVE data). Several r...
CVE-2017-17583
FS Shutterstock Clone 1.0 is affected by a SQL injection in the /Category keywords parameter, likely via the PHP CodeIgniter-based script. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH). Exploitation is associated with a public exploit entry (...
CVE-2017-17582
FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...
CVE-2017-17586
FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...
CVE-2017-17605
The CVE-2017-17605 vulnerability affects the Consumer Complaints Clone Script 1.0, with an SQL Injection in the other-user-profile.php?id parameter. Root cause is unsafe handling of the id parameter, enabling a remote attacker to manipulate queries. Impact is high (confidentiality/integrity/avail...