1991 matches found
CVE-2017-17579
CVE-2017-17579 affects FS Freelancer Clone 1.0 (PHP/MySQL). Multiple connected sources confirm a SQL Injection vulnerability in profile.php with the u parameter (remote exploitation possible). Root cause is unsafely handled input leading to SQL commands being injected. In the CNVD/CNVD-2017-37404...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17580
CVE-2017-17580 affects FS Linkedin Clone 1.0 and is a SQL Injection vulnerability exploitable via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. The issue is evidenced by CVSS metrics (2.0: base score 7.5, PARTIAL impacts; 3.1: base score 9.8, HIGH i...
CVE-2017-17587
CVE-2017-17587 affects FS Indiamart Clone 1.0 (PHP/MySQL). The vulnerability is a SQL injection in three input points: the token parameter in catcompany.php, the id parameter in buyleads-details.php, and the id parameter in company/index.php (c parameter). Impact described in sources corresponds ...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17584
CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...
CVE-2017-17585
FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...
CVE-2017-17580
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
CVE-2017-17583
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...
CVE-2017-17571
FS Foodpanda Clone 1.0 (PHP CodeIgniter) contains a SQL injection vulnerability in the /food keywords parameter. A remote attacker can inject SQL commands due to improper input handling in this parameter, as described in CNVD-2017-37402 and corroborated by NVD entries referencing the same vector....
CVE-2017-17588
FS IMDB Clone 1.0 is affected by a SQL Injection in PHP scripts (movie.php f, tvshow.php s, show_misc_video.php id). The root cause is unsanitized input leading to injectable SQL commands, enabling potential data disclosure/modification. Exploitation details are referenced (e.g., Exploit-DB), but...
CVE-2017-17573
CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...
CVE-2017-17570
FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...
CVE-2017-17585
FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...
CVE-2017-17581
FS Quibids Clone 1.0 is affected by an SQL injection in the itechd.php productid parameter. Multiple sources (CNVD-2017-37406, NVD entry) confirm a SQL injection vulnerability with remote exploitation. Exploit-DB references a posted exploit for this issue. No official patch/version details are pr...
CVE-2017-17577
FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...
CVE-2017-17576
FS Gigs Script 1.0 contains an SQL Injection vulnerability in browse-category.php (cat), browse-scategory.php (sc), and service-provider.php (ser). The root cause is unsanitized input parameters, enabling the execution of arbitrary SQL commands on the backend. Affected software is FS Gigs Script ...