3384 matches found
CVE-2017-17586
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17612
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...
CVE-2017-17573
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17572
FS Amazon Clone 1.0 is affected by a SQL injection vulnerability exploitable via the PATH_INFO endpoint /VerAyari. Public records attribute the issue to improper handling of PATH_INFO in a PHP/MySQL stack, enabling remote attackers to inject SQL commands. Impact is described as high, with potenti...
CVE-2017-17582
FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...
CVE-2017-17586
FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...
CVE-2017-17605
The CVE-2017-17605 vulnerability affects the Consumer Complaints Clone Script 1.0, with an SQL Injection in the other-user-profile.php?id parameter. Root cause is unsafe handling of the id parameter, enabling a remote attacker to manipulate queries. Impact is high (confidentiality/integrity/avail...
CVE-2017-17584
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
CVE-2017-17618
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17579
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
CVE-2017-17621
CVE-2017-17621 affects the Multivendor Penny Auction Clone Script 1.0. The connected sources document a SQL Injection vulnerability that can be triggered via PATH_INFO to the /detail URI, allowing an attacker to inject SQL commands remotely (no authentication required per the CVE data). Several r...
CVE-2017-17583
FS Shutterstock Clone 1.0 is affected by a SQL injection in the /Category keywords parameter, likely via the PHP CodeIgniter-based script. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH). Exploitation is associated with a public exploit entry (...
CVE-2017-17590
CVE-2017-17590 affects FS Stackoverflow Clone 1.0 and is due to a SQL Injection in the /question endpoint where the keywords parameter is unsafely handled. Exploitation could allow an attacker to inject SQL commands, with logs and public references noting an in-the-wild exploit (e.g., Exploit-DB)...
CVE-2017-17584
CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...
CVE-2017-17580
CVE-2017-17580 affects FS Linkedin Clone 1.0 and is a SQL Injection vulnerability exploitable via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. The issue is evidenced by CVSS metrics (2.0: base score 7.5, PARTIAL impacts; 3.1: base score 9.8, HIGH i...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17617
CVE-2017-17617 affects Foodspotting Clone Script 1.0 (PHP Scripts Mall India). A SQL injection exists in quicksearch.php via the q parameter, enabling arbitrary SQL commands due to improper input handling. Public references indicate the vulnerability is exploitable remotely with the q parameter, ...