PT-2017-14884

Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...

PT-2017-14882

Name of the Vulnerable Software and Affected Versions FS Indiamart Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in various PHP files. The vulnerable parameters include the token parameter in 'catcompany.php', the id parameter i...

PT-2017-14914

Name of the Vulnerable Software and Affected Versions Kickstarter Clone Script version 2.0 Description The issue is related to SQL Injection, which occurs via the projid parameter in the investcalc.php file. Recommendations For Kickstarter Clone Script version 2.0, avoid using the projid paramete...

PT-2017-14917

Name of the Vulnerable Software and Affected Versions Multivendor Penny Auction Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the "/detail" API endpoint. This allows for potential exploitation. Recommendations For Multivendor Penny...

PT-2017-14869

Name of the Vulnerable Software and Affected Versions FS Care Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the searchJob.php endpoint, specifically through the jobType or jobFrequency parameters. Recommendations For FS Care Clone version 1.0, avo...

PT-2017-14934

Name of the Vulnerable Software and Affected Versions Groupon Clone Script version 3.01 Description The issue is related to SQL Injection, which can be exploited via the state id parameter in the "city ajax.php" endpoint. Recommendations For Groupon Clone Script version 3.01, update the script to...

PT-2017-14908

Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...

PT-2017-14878

Name of the Vulnerable Software and Affected Versions FS Shutterstock Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /Category endpoint. Recommendations For FS Shutterstock Clone version 1.0, avoid using the keywords...

PT-2017-14874

Name of the Vulnerable Software and Affected Versions FS Freelancer Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the u parameter in the "profile.php" endpoint. Recommendations For FS Freelancer Clone version 1.0, consider restricting access to th...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

CVE-2017-17589: Improper Neutralization of Special Elements used in an SQL Command

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...

CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...

CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

CVE-2017-17585: Improper Neutralization of Special Elements used in an SQL Command

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

PT-2017-14868

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...

PT-2017-14875

Name of the Vulnerable Software and Affected Versions FS Linkedin Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include grid in "group.php", fid in "profile.php", and id in "company...