PT-2017-14883

Name of the Vulnerable Software and Affected Versions FS IMDB Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are f in 'movie.php', s in 'tvshow.php', and id in 'show misc video.php'...

CVE-2017-17641: Improper Neutralization of Special Elements used in an SQL Command

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

CVE-2017-17582: Improper Neutralization of Special Elements used in an SQL Command

FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17581: Improper Neutralization of Special Elements used in an SQL Command

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17588: Improper Neutralization of Special Elements used in an SQL Command

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17583: Improper Neutralization of Special Elements used in an SQL Command

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...

CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...

CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...

CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command

FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...

PT-2017-14876

Name of the Vulnerable Software and Affected Versions FS Quibids Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the productid parameter in the itechd.php file. Recommendations For FS Quibids Clone version 1.0, consider restricting access to the...

PT-2017-14865

Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...

CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

PT-2017-14879

Name of the Vulnerable Software and Affected Versions FS Makemytrip Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "show-flight-result.php" endpoint, specifically through the fl orig or fl dest parameters. Recommendations For FS Makemytrip Clon...

Groupon Clone Script 3.01 SQL Injection

Exploit Title: Groupon Clone Script 3.01 - 'stateid' 's' SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Version: 3.01 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

FS Expedia Clone 1.0 SQL Injection

Exploit Title: FS Expedia Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/expedia-clone/ Demo: http://expedia-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx...

FS Amazon Clone 1.0 SQL Injection

Exploit Title: FS Amazon Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/amazon-clone/ Demo: http://amazon-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Consumer Complaints Clone Script 1.0 SQL Injection

Exploit Title: Consumer Complaints Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/consumer-complaints-clone-script/ Demo: http://fxwebsolution.com/demo/consumer-complaints/ Version:...

FS Freelancer Clone 1.0 SQL Injection

Exploit Title: FS Freelancer Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/freelancer-clone/ Demo: http://freelancer-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on:...