CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17570

FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...

CVE-2017-17583

FS Shutterstock Clone 1.0 is affected by a SQL injection in the /Category keywords parameter, likely via the PHP CodeIgniter-based script. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH). Exploitation is associated with a public exploit entry (...

CVE-2017-17612

The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...

CVE-2017-17581: Improper Neutralization of Special Elements used in an SQL Command

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

PT-2017-14911

Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...

PT-2017-14880

Name of the Vulnerable Software and Affected Versions FS Monster Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the Employer Details.php file. Recommendations For FS Monster Clone version 1.0, avoid using the id parameter in the...

PT-2017-14876

Name of the Vulnerable Software and Affected Versions FS Quibids Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the productid parameter in the itechd.php file. Recommendations For FS Quibids Clone version 1.0, consider restricting access to the...

CVE-2017-17583: Improper Neutralization of Special Elements used in an SQL Command

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...

PT-2017-14866

Name of the Vulnerable Software and Affected Versions FS Foodpanda Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /food API endpoint, specifically through the keywords parameter. Recommendations For FS Foodpanda Clone version 1.0, consider...

PT-2017-14869

Name of the Vulnerable Software and Affected Versions FS Care Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the searchJob.php endpoint, specifically through the jobType or jobFrequency parameters. Recommendations For FS Care Clone version 1.0, avo...

PT-2017-14937

Name of the Vulnerable Software and Affected Versions Resume Clone Script version 2.0.5 Description The issue is related to SQL Injection, which occurs via the id parameter in the "preview.php" API endpoint. Recommendations For Resume Clone Script version 2.0.5, consider restricting access to the...

CVE-2017-17582: Improper Neutralization of Special Elements used in an SQL Command

FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17638: Improper Neutralization of Special Elements used in an SQL Command

Groupon Clone Script 3.01 has SQL Injection via the cityajax.php stateid parameter...

PT-2017-14934

Name of the Vulnerable Software and Affected Versions Groupon Clone Script version 3.01 Description The issue is related to SQL Injection, which can be exploited via the state id parameter in the "city ajax.php" endpoint. Recommendations For Groupon Clone Script version 3.01, update the script to...

PT-2017-14867

Name of the Vulnerable Software and Affected Versions FS Amazon Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the PATH INFO to the /VerAyari endpoint. Recommendations For FS Amazon Clone version 1.0, avoid using the /VerAyari endpoint until a fix ...

PT-2017-14865

Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...

PT-2017-14901

Name of the Vulnerable Software and Affected Versions Consumer Complaints Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "other-user-profile.php" file. Recommendations For Consumer Complaints Clone Script version 1.0, avoid usi...

PT-2017-14892

Name of the Vulnerable Software and Affected Versions Nearbuy Clone Script version 3.2 Description The issue is related to SQL Injection, which occurs via the category list.php search parameter. This allows for potential exploitation. Recommendations For Nearbuy Clone Script version 3.2, update t...

PT-2017-14884

Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...