EUVD-2017-8736

Malware in sbrugna...

EUVD-2018-13181

Malware in sbrugna...

CVE-2018-20630

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20630

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

PT-2019-10126

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance Crowdfunding Script version 2.0.3 Description: The issue allows for directory traversal through a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory...

CVE-2018-20630: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

FS Crowdfunding Script SQL Injection Vulnerability

FS Crowdfunding Script is a set of scripts for online crowdfunding websites based on PHP and MySQL. A SQL injection vulnerability exists in FS Crowdfunding Script version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the latestnewsdetails.php file to inject...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17578

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

Sql injection

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

CVE-2017-17578

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17578

CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...

CVE-2017-17591

The CVE-2017-17591 entry concerns Realestate Crowdfunding Script version 2.7.2, which is vulnerable to SQL Injection via the pid parameter in the single-cause.php file. The connected sources confirm this SQLi issue and provide public exploit references (e.g., Exploit-DB entry 43239). The impact i...

CVE-2017-17591: Improper Neutralization of Special Elements used in an SQL Command

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17578: Improper Neutralization of Special Elements used in an SQL Command

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

PT-2017-14873

Name of the Vulnerable Software and Affected Versions FS Crowdfunding Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "latest news details.php" API endpoint. Recommendations For FS Crowdfunding Script version 1.0, consider restricting...

PT-2017-14886

Name of the Vulnerable Software and Affected Versions Realestate Crowdfunding Script version 2.7.2 Description The issue is related to SQL Injection, which occurs via the pid parameter in the "single-cause.php" endpoint. Recommendations For Realestate Crowdfunding Script version 2.7.2, consider...

Realestate Crowdfunding Script 2.7.2 SQL Injection Vulnerability

Realestate Crowdfunding Script version 2.7.2 suffers from a remote SQL injection vulnerability. Exploit Title: Realestate Crowdfunding Script 2.7.2 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...