Lucene search
+L

192 matches found

Prion
Prion
•added 2018/01/29 5:29 a.m.•23 views

Sql injection

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

7.5CVSS9.8AI score0.0305EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2018/01/29 5:00 a.m.•58 views

CVE-2018-6364

Vulnerability : Multilanguage Real Estate MLM Script (3.0 and earlier) has an SQL injection in the srch parameter of /product-list.php . Multiple sources (CNVD/NVD) describe remote, unauthenticated exploitation with high impact to confidentiality, integrity, and availability. CVSSv3.0 base score ...

9.8CVSS9.8AI score0.0305EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2018/01/29 12:00 a.m.•4 views

PT-2018-17507

Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0 Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter. Recommendations For versions prior to 3.0, update to versi...

9.8CVSS0.0305EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/29 12:00 a.m.•5 views

CVE-2018-6364: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

9.8CVSS8.2AI score0.0305EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2018/01/28 12:00 a.m.•34 views

Multilanguage Real Estate MLM Script 3.0 SQL Injection

Exploit Title: Multilanguage Real Estate MLM Script = 3.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/y2OP4658391/php-scripts/multilanguage-real-estate-mlm-script Version: = 3.0 Category: Webapps...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/01/28 12:00 a.m.•63 views

Multilanguage Real Estate MLM Script 3.0 - 'srch' SQL Injection

Exploit Title: Multilanguage Real Estate MLM Script = 3.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/y2OP4658391/php-scripts/multilanguage-real-estate-mlm-script Version: = 3.0 Category: Webapps...

9.8CVSS8.5AI score0.0305EPSS
SaveExploits2
exploitpack
exploitpack
•added 2018/01/28 12:00 a.m.•17 views

Multilanguage Real Estate MLM Script 3.0 - srch SQL Injection

Multilanguage Real Estate MLM Script 3.0 - srch SQL Injection Exploit Title: Multilanguage Real Estate MLM Script = 3.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link:...

8.6AI score
SaveExploits0
CNVD
CNVD
•added 2017/12/15 12:00 a.m.•12 views

PHP Scripts Mall Affiliate MLM Script SQL Injection Vulnerability

PHP Scripts Mall Affiliate MLM Script is a set of PHP based product distribution, affiliate website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Affiliate MLM Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'key'...

9.8CVSS8.2AI score0.0305EPSS
SaveExploits2References1
NVD
NVD
•added 2017/12/13 9:29 a.m.•30 views

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

9.8CVSS10AI score0.02204EPSS
SaveExploits2References2
NVD
NVD
•added 2017/12/13 9:29 a.m.•30 views

CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

9.8CVSS10AI score0.02204EPSS
SaveExploits2References2
NVD
NVD
•added 2017/12/13 9:29 a.m.•32 views

CVE-2017-17598

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter...

9.8CVSS10AI score0.0305EPSS
SaveExploits2References2
NVD
NVD
•added 2017/12/13 9:29 a.m.•38 views

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

9.8CVSS10AI score0.0305EPSS
SaveExploits2References2
Prion
Prion
•added 2017/12/13 9:29 a.m.•26 views

Sql injection

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter...

7.5CVSS9.9AI score0.0305EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2017/12/13 9:29 a.m.•30 views

Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

7.5CVSS9.9AI score0.0305EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2017/12/13 9:29 a.m.•23 views

Sql injection

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

7.5CVSS9.9AI score0.02204EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2017/12/13 9:29 a.m.•23 views

Sql injection

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

7.5CVSS9.9AI score0.02204EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2017/12/13 9:00 a.m.•41 views

CVE-2017-17598

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter...

10AI score0.0305EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/12/13 9:00 a.m.•41 views

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

10AI score0.02204EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/12/13 9:00 a.m.•35 views

CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

10AI score0.02204EPSS
SaveExploits2References2
CVE
CVE
•added 2017/12/13 9:00 a.m.•62 views

CVE-2017-17598

Affiliate MLM Script 1.0 is affected by an SQL injection in product-category.php via the key parameter. The vulnerability is described across multiple sources (NVD/CNVD, CVE); remote attacker can inject SQL commands. Exploitation details and concrete remediation are not provided in the supplied d...

9.8CVSS9.9AI score0.0305EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder