3627 matches found
CVE-2017-17579: Improper Neutralization of Special Elements used in an SQL Command
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter...
PT-2017-14885 · Fs · Fs Stackoverflow Clone
Name of the Vulnerable Software and Affected Versions: FS Stackoverflow Clone version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/question" API endpoint, specifically through the keywords parameter. This allows for potential unauthorized access to...
CVE-2017-17582: Improper Neutralization of Special Elements used in an SQL Command
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17581: Improper Neutralization of Special Elements used in an SQL Command
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter...
CVE-2017-17588: Improper Neutralization of Special Elements used in an SQL Command
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...
CVE-2017-17583: Improper Neutralization of Special Elements used in an SQL Command
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter...
CVE-2017-17580: Improper Neutralization of Special Elements used in an SQL Command
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
CVE-2017-17576: Improper Neutralization of Special Elements used in an SQL Command
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter...
CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command
FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...
CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...
CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17584: Improper Neutralization of Special Elements used in an SQL Command
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
PT-2017-14876
Name of the Vulnerable Software and Affected Versions FS Quibids Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the productid parameter in the itechd.php file. Recommendations For FS Quibids Clone version 1.0, consider restricting access to the...
PT-2017-14865
Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...
PT-2017-14868
Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...
PT-2017-14875
Name of the Vulnerable Software and Affected Versions FS Linkedin Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include grid in "group.php", fid in "profile.php", and id in "company...
FS Indiamart Clone 1.0 SQL Injection
Exploit Title: FS Indiamart Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/indiamart-clone/ Demo: http://indiamart-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on:...
FS Gigs Script 1.0 SQL Injection
Exploit Title: FS Gigs Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/gigs-script/ Demo: http://gigs.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...
FS Freelancer Clone 1.0 SQL Injection
Exploit Title: FS Freelancer Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/freelancer-clone/ Demo: http://freelancer-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on:...