CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...

PT-2017-14914

Name of the Vulnerable Software and Affected Versions Kickstarter Clone Script version 2.0 Description The issue is related to SQL Injection, which occurs via the projid parameter in the investcalc.php file. Recommendations For Kickstarter Clone Script version 2.0, avoid using the projid paramete...

PT-2017-14882

Name of the Vulnerable Software and Affected Versions FS Indiamart Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in various PHP files. The vulnerable parameters include the token parameter in 'catcompany.php', the id parameter i...

PT-2017-14917

Name of the Vulnerable Software and Affected Versions Multivendor Penny Auction Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the "/detail" API endpoint. This allows for potential exploitation. Recommendations For Multivendor Penny...

PT-2017-14908

Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17597: Improper Neutralization of Special Elements used in an SQL Command

Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...

CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...

PT-2017-14868

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...

CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

CVE-2017-17618: Improper Neutralization of Special Elements used in an SQL Command

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...

PT-2017-14883

Name of the Vulnerable Software and Affected Versions FS IMDB Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are f in 'movie.php', s in 'tvshow.php', and id in 'show misc video.php'...

PT-2017-14878

Name of the Vulnerable Software and Affected Versions FS Shutterstock Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /Category endpoint. Recommendations For FS Shutterstock Clone version 1.0, avoid using the keywords...

PT-2017-14877

Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint. Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /fo...

CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

PT-2017-14884

Name of the Vulnerable Software and Affected Versions FS Thumbtack Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the cat parameter in the "browse-category.php" endpoint or the sc parameter in the "browse-scategory.php" endpoint. Recommendations For FS...

CVE-2017-17589: Improper Neutralization of Special Elements used in an SQL Command

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...

PT-2017-14875

Name of the Vulnerable Software and Affected Versions FS Linkedin Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include grid in "group.php", fid in "profile.php", and id in "company...

CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...