CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

Sql injection

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

CVE-2017-17612

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

CVE-2017-17612

The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...

CVE-2017-17612: Improper Neutralization of Special Elements used in an SQL Command

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter...

PT-2017-14908

Name of the Vulnerable Software and Affected Versions Hot Scripts Clone version 3.1 Description The issue is related to SQL Injection, which can be exploited via the /categories endpoint using the subctid or mctid parameters. Recommendations For Hot Scripts Clone version 3.1, consider restricting...

Hot Scripts Clone 3.1 - subctid mctid SQL Injection

Hot Scripts Clone 3.1 - subctid mctid SQL Injection Exploit Title: Hot Scripts Clone 3.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/hot-scripts-clone-script-classified/ Version: 3.1 Category:...

Hot Scripts Clone 3.1 - subctid / mctid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hot Scripts Clone 3.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/hot-scripts-clone-script-classified/ Version: 3.1 Category:...

Airbnb Clone Script - Arbitrary File Upload

Airbnb Clone Script - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

Penny Auction Script - Arbitrary File Upload

Vulnerability:Profile Arbitrary Shell Upload Google Dork: Penny Auction Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/ Script Name: Penny Auction Script Script Buy Now: http://www.hotscripts.com/listing/penny-auction-software-156843/ Author: İhsan Şencan Author...

Scripts Genie Hot Scripts Clone (showcategory.php, cid param) - SQL Injection Vulnerability

No description provided by source. -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + Security Flaw + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + + + /\ \ | | + +/ |/ / | | | |/ / / \ | + +\ \ / | || / /\ / / | + +|/||,\ / || + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+-+ +Scripts Genie Hot Scripts...

Simple Text-File Login script 1.0.6 - (DD/RFI) Multiple Vulnerabilities

No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...

Scripts Genie Hot Scripts Clone SQL Injection Vulnerability

Exploit for php platform in category web applications -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + Security Flaw + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + + + /\ \ | | + +/ |/ / | | | |/ / / \ | + +\ \ / | || / /\ / / | + +|/||,\ / || + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+-+ +Scripts...

Scripts Genie Hot Scripts Clone - 'showcategory.php?cid' SQL Injection

-+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + Security Flaw + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+=- + + + /\ \ | | + +/ |/ / | | | |/ / / \ | + +\ \ / | || / /\ / / | + +|/||,\ / || + -+=--+=--+=--+=--+=--+=--+=--+=--+=--+-+ +Scripts Genie Hot Scripts Clone Script+ + SQL Injection...

PHP iManager 3.1 Cross Site Scripting

----------------IN THE NAME OF ALLAH------------------- Discovered By Mr.Cicili PHP iManager 3.1 XSS Vulnerability Source Link : http://www.hotscripts.com/listing/php-imanager-3-1/ Expl0it ---------- http://localhost/imanager/admin/product.php http://localhost/imanager/admin/customer.php PUT your...

HauntmAx CMS Haunted House Directory Listing SQL Injection

No description provided by source. Name : HauntmAx CMS SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.hauntmax.com/ Platform: Linux,Windows Price: $200 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz t...

Mini File Host 1.5 Shell Upload

===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ===================================================================== ========= » Note : This vulnerability...

Silentum LoginSys 1.0.0 - Insecure Cookie Handling

START 0x01 Informations: Script : Silentum LoginSys 1.0.0 Download : http://www.hotscripts.com/jump.php?listingid=69667&jumptype=1 Vulnerability : Insecure Cookie Handling Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : x0r, emgent, Ja...

phpg 1.6 - Cross-Site Scripting Full Path Disclosure Denial of Service

phpg 1.6 - Cross-Site Scripting Full Path Disclosure Denial of Service PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS:...

phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service

PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS: http://site.com/phpg/index.php?url=" XSS Temp XSS:...