CVE-2017-17641

CVE-2017-17641 affects Resume Clone Script 2.0.5, with a SQL injection in the preview.php id parameter. The root cause is an unsafely constructed SQL query using the id input, allowing a remote attacker to inject commands and potentially access or alter the database (Impact: partial to high in co...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17575

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17572

FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...

CVE-2017-17589

FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...

CVE-2017-17574

CVE-2017-17574 affects FS Care Clone 1.0, a PHP/MySQL-based online booking script. The vulnerability is a SQL injection in the searchJob.php endpoint, exploitable via the parameters jobType or jobFrequency . The issue stems from unsafe handling of these inputs, enabling command execution against ...

CVE-2017-17590

CVE-2017-17590 affects FS Stackoverflow Clone 1.0 and is due to a SQL Injection in the /question endpoint where the keywords parameter is unsafely handled. Exploitation could allow an attacker to inject SQL commands, with logs and public references noting an in-the-wild exploit (e.g., Exploit-DB)...

CVE-2017-17572

FS Amazon Clone 1.0 is affected by a SQL injection vulnerability exploitable via the PATH_INFO endpoint /VerAyari. Public records attribute the issue to improper handling of PATH_INFO in a PHP/MySQL stack, enabling remote attackers to inject SQL commands. Impact is described as high, with potenti...

CVE-2017-17588

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17618

CVE-2017-17618 affects Kickstarter Clone Script 2.0 and is a SQL Injection vulnerability in investcalc.php via the projid parameter. Public records describe injection as the root cause, with high impact (C/H/I/A) per CVSS v3.0 (9.8) and CVSS v2.0 (7.5). Exploitation is documented (exploit-db link...

CVE-2017-17615

CVE-2017-17615 affects Facebook Clone Script 1.0 (PHP Scripts Mall Facebook Clone Script). The vulnerability is an SQL injection in friend-profile.php via the id parameter, allowing remote command injection with the potential to access/modify data (as stated by CNVD/NVD); exploits exist (e.g., Ex...

CVE-2017-17573

CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...

CVE-2017-17638

The CVE relates to Groupon Clone Script 3.01, where an SQL Injection vulnerability exists in city_ajax.php via the state_id parameter. Public references (Exploit-DB, Packet Storm) indicate a remote attacker could leverage this to inject SQL commands. The CVSS metrics indicate a high severity (AV:...

CVE-2017-17582

FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...

CVE-2017-17581

FS Quibids Clone 1.0 is affected by an SQL injection in the itechd.php productid parameter. Multiple sources (CNVD-2017-37406, NVD entry) confirm a SQL injection vulnerability with remote exploitation. Exploit-DB references a posted exploit for this issue. No official patch/version details are pr...

CVE-2017-17580

CVE-2017-17580 affects FS Linkedin Clone 1.0 and is a SQL Injection vulnerability exploitable via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. The issue is evidenced by CVSS metrics (2.0: base score 7.5, PARTIAL impacts; 3.1: base score 9.8, HIGH i...

CVE-2017-17585

FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...

CVE-2017-17587

CVE-2017-17587 affects FS Indiamart Clone 1.0 (PHP/MySQL). The vulnerability is a SQL injection in three input points: the token parameter in catcompany.php, the id parameter in buyleads-details.php, and the id parameter in company/index.php (c parameter). Impact described in sources corresponds ...

CVE-2017-17584

CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...