4174 matches found
PT-2017-14866
Name of the Vulnerable Software and Affected Versions FS Foodpanda Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /food API endpoint, specifically through the keywords parameter. Recommendations For FS Foodpanda Clone version 1.0, consider...
PT-2017-14881
Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...
PT-2017-14884
Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...
PT-2017-14882
Name of the Vulnerable Software and Affected Versions FS Indiamart Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in various PHP files. The vulnerable parameters include the token parameter in 'catcompany.php', the id parameter i...
PT-2017-14914
Name of the Vulnerable Software and Affected Versions Kickstarter Clone Script version 2.0 Description The issue is related to SQL Injection, which occurs via the projid parameter in the investcalc.php file. Recommendations For Kickstarter Clone Script version 2.0, avoid using the projid paramete...
PT-2017-14917
Name of the Vulnerable Software and Affected Versions Multivendor Penny Auction Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the "/detail" API endpoint. This allows for potential exploitation. Recommendations For Multivendor Penny...
PT-2017-14869
Name of the Vulnerable Software and Affected Versions FS Care Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the searchJob.php endpoint, specifically through the jobType or jobFrequency parameters. Recommendations For FS Care Clone version 1.0, avo...
PT-2017-14934
Name of the Vulnerable Software and Affected Versions Groupon Clone Script version 3.01 Description The issue is related to SQL Injection, which can be exploited via the state id parameter in the "city ajax.php" endpoint. Recommendations For Groupon Clone Script version 3.01, update the script to...
PT-2017-14908
Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...
PT-2017-14878
Name of the Vulnerable Software and Affected Versions FS Shutterstock Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /Category endpoint. Recommendations For FS Shutterstock Clone version 1.0, avoid using the keywords...
PT-2017-14874
Name of the Vulnerable Software and Affected Versions FS Freelancer Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the u parameter in the "profile.php" endpoint. Recommendations For FS Freelancer Clone version 1.0, consider restricting access to th...
PT-2017-14872
Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...
CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17589: Improper Neutralization of Special Elements used in an SQL Command
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...
CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...