321 matches found
PT-2017-14898
Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...
PT-2017-14906
Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...
PT-2017-14925
Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...
CVE-2017-17627: Improper Neutralization of Special Elements used in an SQL Command
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php reportvideos array parameter...
CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17636: Improper Neutralization of Special Elements used in an SQL Command
MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...
CVE-2017-17602: Improper Neutralization of Special Elements used in an SQL Command
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
PT-2017-14932
Name of the Vulnerable Software and Affected Versions MLM Forced Matrix version 2.0.9 Description The issue is related to SQL Injection, which can be exploited via the newid parameter in the "news-detail.php" API endpoint. Recommendations For MLM Forced Matrix version 2.0.9, consider restricting...
PT-2017-14920
Name of the Vulnerable Software and Affected Versions PHP Multivendor Ecommerce version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "single detail.php" page using the sid parameter, or through the "category.php" page using the searchcat or chid1 parameters...
PT-2017-14931
Name of the Vulnerable Software and Affected Versions MLM Forex Market Plan Script version 2.0.4 Description The issue concerns SQL Injection, which can be exploited via the newid parameter in the "news detail.php" endpoint or the eventid parameter in the "event detail.php" endpoint...
PT-2017-14929
Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...
PT-2017-14923
Name of the Vulnerable Software and Affected Versions Readymade Video Sharing Script version 3.2 Description The issue concerns a SQL Injection vulnerability. It occurs via the report videos array parameter in the "single-video-detail.php" API endpoint. Recommendations For Readymade Video Sharing...
Advance B2B Script 2.1.3 - show_id pid SQL Injection
Advance B2B Script 2.1.3 - showid pid SQL Injection Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/...
calligarisstore.ca XSS vulnerability
Vulnerable URL: http://calligarisstore.ca/product-detail.php?ItemID=1-Bed=Beds'"--!...
karllippard.com XSS vulnerability
Vulnerable URL: http://karllippard.com/Detail.php?weapon=1"...
mycar.pk XSS vulnerability
Vulnerable URL: http://mycar.pk//car-search-detail.php?RefID=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:23 GMT Vulnerability type:| XSS Vulnerability status:| Public...
samplerarchive.org XSS vulnerability
Vulnerable URL: http://samplerarchive.org/detail.php?said=1/-///'/"//--...
gemsalongthemohawk.com XSS vulnerability
Vulnerable URL: http://gemsalongthemohawk.com/associate-detail.php?a=Vernon-Downs-Casino-&-Hotel=56%22%27--!%3E%3CHtml%20Onmouseenter=confirmOPENBUGBOUNTY%20%3C!--//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...