Sql injection

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

Sql injection

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

Sql injection

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17575

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17579

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

CVE-2017-17583

FS Shutterstock Clone 1.0 is affected by a SQL injection in the /Category keywords parameter, likely via the PHP CodeIgniter-based script. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH). Exploitation is associated with a public exploit entry (...

CVE-2017-17588

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17584

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

CVE-2017-17587

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

CVE-2017-17579

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...

CVE-2017-17585

FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...

CVE-2017-17588

FS IMDB Clone 1.0 is affected by a SQL Injection in PHP scripts (movie.php f, tvshow.php s, show_misc_video.php id). The root cause is unsanitized input leading to injectable SQL commands, enabling potential data disclosure/modification. Exploitation details are referenced (e.g., Exploit-DB), but...

CVE-2017-17581

FS Quibids Clone 1.0 is affected by an SQL injection in the itechd.php productid parameter. Multiple sources (CNVD-2017-37406, NVD entry) confirm a SQL injection vulnerability with remote exploitation. Exploit-DB references a posted exploit for this issue. No official patch/version details are pr...

CVE-2017-17579

CVE-2017-17579 affects FS Freelancer Clone 1.0 (PHP/MySQL). Multiple connected sources confirm a SQL Injection vulnerability in profile.php with the u parameter (remote exploitation possible). Root cause is unsafely handled input leading to SQL commands being injected. In the CNVD/CNVD-2017-37404...

CVE-2017-17570

FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...

CVE-2017-17590

CVE-2017-17590 affects FS Stackoverflow Clone 1.0 and is due to a SQL Injection in the /question endpoint where the keywords parameter is unsafely handled. Exploitation could allow an attacker to inject SQL commands, with logs and public references noting an in-the-wild exploit (e.g., Exploit-DB)...

CVE-2017-17586

FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...