9770 matches found
CVE-2017-17580
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or companydetails.php id parameter...
CVE-2017-17600
Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...
CVE-2017-17615
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
PT-2017-14911
Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...
CVE-2017-17594: Improper Neutralization of Special Elements used in an SQL Command
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...
CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
PT-2017-14863
Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...
PT-2017-14896
Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...
PT-2017-14873
Name of the Vulnerable Software and Affected Versions FS Crowdfunding Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "latest news details.php" API endpoint. Recommendations For FS Crowdfunding Script version 1.0, consider restricting...
CVE-2017-17578: Improper Neutralization of Special Elements used in an SQL Command
FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...
PT-2017-14889
Name of the Vulnerable Software and Affected Versions DomainSale PHP Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "domain.php" endpoint. Recommendations For DomainSale PHP Script version 1.0, avoid using the id parameter in the...
PT-2017-14872
Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...
PT-2017-14478
Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to create arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...
CVE-2017-17600: Improper Neutralization of Special Elements used in an SQL Command
Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...
PT-2017-14937
Name of the Vulnerable Software and Affected Versions Resume Clone Script version 2.0.5 Description The issue is related to SQL Injection, which occurs via the id parameter in the "preview.php" API endpoint. Recommendations For Resume Clone Script version 2.0.5, consider restricting access to the...
CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17569: Improper Neutralization of Input During Web Page Generation
Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...
PT-2017-14861
Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to SQL Injection, which occurs via the ID parameter in the "admin/user activate submit.php" API endpoint. Recommendations For Scubez Posty...