4237 matches found
PT-2017-14914
Name of the Vulnerable Software and Affected Versions Kickstarter Clone Script version 2.0 Description The issue is related to SQL Injection, which occurs via the projid parameter in the investcalc.php file. Recommendations For Kickstarter Clone Script version 2.0, avoid using the projid paramete...
PT-2017-14882
Name of the Vulnerable Software and Affected Versions FS Indiamart Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in various PHP files. The vulnerable parameters include the token parameter in 'catcompany.php', the id parameter i...
PT-2017-14917
Name of the Vulnerable Software and Affected Versions Multivendor Penny Auction Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the "/detail" API endpoint. This allows for potential exploitation. Recommendations For Multivendor Penny...
PT-2017-14908
Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...
CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...
CVE-2017-17597: Improper Neutralization of Special Elements used in an SQL Command
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
PT-2017-14868
Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...
CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
CVE-2017-17618: Improper Neutralization of Special Elements used in an SQL Command
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter...
PT-2017-14883
Name of the Vulnerable Software and Affected Versions FS IMDB Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are f in 'movie.php', s in 'tvshow.php', and id in 'show misc video.php'...
PT-2017-14878
Name of the Vulnerable Software and Affected Versions FS Shutterstock Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /Category endpoint. Recommendations For FS Shutterstock Clone version 1.0, avoid using the keywords...
PT-2017-14877
Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint. Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /fo...
CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
PT-2017-14875
Name of the Vulnerable Software and Affected Versions FS Linkedin Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include grid in "group.php", fid in "profile.php", and id in "company...
CVE-2017-17577: Improper Neutralization of Special Elements used in an SQL Command
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...