1891 matches found
CVE-2017-17577
FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...
CVE-2017-17576
FS Gigs Script 1.0 contains an SQL Injection vulnerability in browse-category.php (cat), browse-scategory.php (sc), and service-provider.php (ser). The root cause is unsanitized input parameters, enabling the execution of arbitrary SQL commands on the backend. Affected software is FS Gigs Script ...
CVE-2017-17571
FS Foodpanda Clone 1.0 (PHP CodeIgniter) contains a SQL injection vulnerability in the /food keywords parameter. A remote attacker can inject SQL commands due to improper input handling in this parameter, as described in CNVD-2017-37402 and corroborated by NVD entries referencing the same vector....
CVE-2017-17589
FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...
CVE-2017-17584
CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...
CVE-2017-17580
CVE-2017-17580 affects FS Linkedin Clone 1.0 and is a SQL Injection vulnerability exploitable via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter. The issue is evidenced by CVSS metrics (2.0: base score 7.5, PARTIAL impacts; 3.1: base score 9.8, HIGH i...
CVE-2017-17578
CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...
CVE-2017-17574
CVE-2017-17574 affects FS Care Clone 1.0, a PHP/MySQL-based online booking script. The vulnerability is a SQL injection in the searchJob.php endpoint, exploitable via the parameters jobType or jobFrequency . The issue stems from unsafe handling of these inputs, enabling command execution against ...
CVE-2017-17573
CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...
CVE-2017-17587
CVE-2017-17587 affects FS Indiamart Clone 1.0 (PHP/MySQL). The vulnerability is a SQL injection in three input points: the token parameter in catcompany.php, the id parameter in buyleads-details.php, and the id parameter in company/index.php (c parameter). Impact described in sources corresponds ...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17580
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
CVE-2017-17576
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...
CVE-2017-17583
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...
CVE-2017-17573
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17586
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17585
FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...