3384 matches found
CVE-2017-17571
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
Sql injection
FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...
CVE-2017-17581
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
Sql injection
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17583
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...
CVE-2017-17575
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...
Sql injection
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
Sql injection
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...
Sql injection
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...
Sql injection
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17570
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
CVE-2017-17615
CVE-2017-17615 affects Facebook Clone Script 1.0 (PHP Scripts Mall Facebook Clone Script). The vulnerability is an SQL injection in friend-profile.php via the id parameter, allowing remote command injection with the potential to access/modify data (as stated by CNVD/NVD); exploits exist (e.g., Ex...
CVE-2017-17574
CVE-2017-17574 affects FS Care Clone 1.0, a PHP/MySQL-based online booking script. The vulnerability is a SQL injection in the searchJob.php endpoint, exploitable via the parameters jobType or jobFrequency . The issue stems from unsafe handling of these inputs, enabling command execution against ...
CVE-2017-17618
CVE-2017-17618 affects Kickstarter Clone Script 2.0 and is a SQL Injection vulnerability in investcalc.php via the projid parameter. Public records describe injection as the root cause, with high impact (C/H/I/A) per CVSS v3.0 (9.8) and CVSS v2.0 (7.5). Exploitation is documented (exploit-db link...
CVE-2017-17577
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
CVE-2017-17579
CVE-2017-17579 affects FS Freelancer Clone 1.0 (PHP/MySQL). Multiple connected sources confirm a SQL Injection vulnerability in profile.php with the u parameter (remote exploitation possible). Root cause is unsafely handled input leading to SQL commands being injected. In the CNVD/CNVD-2017-37404...
CVE-2017-17589
FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...