PT-2017-14884

Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...

CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

CVE-2017-17612: Improper Neutralization of Special Elements used in an SQL Command

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

PT-2017-14874

Name of the Vulnerable Software and Affected Versions FS Freelancer Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the u parameter in the "profile.php" endpoint. Recommendations For FS Freelancer Clone version 1.0, consider restricting access to th...

CVE-2017-17590: Improper Neutralization of Special Elements used in an SQL Command

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter...

CVE-2017-17574: Improper Neutralization of Special Elements used in an SQL Command

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter...

CVE-2017-17585: Improper Neutralization of Special Elements used in an SQL Command

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

PT-2017-14885 · Fs · Fs Stackoverflow Clone

Name of the Vulnerable Software and Affected Versions: FS Stackoverflow Clone version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/question" API endpoint, specifically through the keywords parameter. This allows for potential unauthorized access to...

PT-2017-14879

Name of the Vulnerable Software and Affected Versions FS Makemytrip Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "show-flight-result.php" endpoint, specifically through the fl orig or fl dest parameters. Recommendations For FS Makemytrip Clon...

CVE-2017-17588: Improper Neutralization of Special Elements used in an SQL Command

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17589: Improper Neutralization of Special Elements used in an SQL Command

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...

PT-2017-14913

Name of the Vulnerable Software and Affected Versions Foodspotting Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the quicksearch.php API endpoint, specifically through the q parameter. This allows for potential exploitation. Recommendations For...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

PT-2017-14881

Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...

CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...

CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command

FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...

CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...

CVE-2017-17571: Improper Neutralization of Special Elements used in an SQL Command

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...