CVE-2017-17582

FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...

CVE-2017-17583

FS Shutterstock Clone 1.0 is affected by a SQL injection in the /Category keywords parameter, likely via the PHP CodeIgniter-based script. The vulnerability is documented with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base 7.5 (HIGH). Exploitation is associated with a public exploit entry (...

CVE-2017-17584

CVE-2017-17584 affects FS Makemytrip Clone 1.0. The vulnerability is a SQL injection in show-flight-result.php, exploitable via the fl_orig or fl_dest parameters. The CNVD entry confirms a remote attacker can inject SQL commands, suggesting high impact on confidentiality, integrity, and availabil...

CVE-2017-17585

FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...

CVE-2017-17586

FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...

CVE-2017-17590

CVE-2017-17590 affects FS Stackoverflow Clone 1.0 and is due to a SQL Injection in the /question endpoint where the keywords parameter is unsafely handled. Exploitation could allow an attacker to inject SQL commands, with logs and public references noting an in-the-wild exploit (e.g., Exploit-DB)...

CVE-2017-17587

CVE-2017-17587 affects FS Indiamart Clone 1.0 (PHP/MySQL). The vulnerability is a SQL injection in three input points: the token parameter in catcompany.php, the id parameter in buyleads-details.php, and the id parameter in company/index.php (c parameter). Impact described in sources corresponds ...

CVE-2017-17588

FS IMDB Clone 1.0 is affected by a SQL Injection in PHP scripts (movie.php f, tvshow.php s, show_misc_video.php id). The root cause is unsanitized input leading to injectable SQL commands, enabling potential data disclosure/modification. Exploitation details are referenced (e.g., Exploit-DB), but...

CVE-2017-17577

FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...

CVE-2017-17573

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...

CVE-2017-17584

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...

CVE-2017-17589

FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...

PT-2017-14877

Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint. Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /fo...

PT-2017-14880

Name of the Vulnerable Software and Affected Versions FS Monster Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the Employer Details.php file. Recommendations For FS Monster Clone version 1.0, avoid using the id parameter in the...

Qualys Security Advisory - GNU C Library Memory Leak / Buffer Overflow

Qualys Security Advisory Buffer overflow in glibc's ld.so ======================================================================== Contents ======================================================================== Summary Memory Leak Buffer Overflow Exploitation Acknowledgments...

CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...

CVE-2017-17571: Improper Neutralization of Special Elements used in an SQL Command

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17578: Improper Neutralization of Special Elements used in an SQL Command

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

CVE-2017-17577: Improper Neutralization of Special Elements used in an SQL Command

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...