93 matches found
CVE-2024-58393
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
CVE-2024-58393 i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
CVE-2024-58393
The i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) is vulnerable to an SQL injection flaw. Unauthenticated attackers can manipulate database queries by sending GET requests to /product-details.php using boolean-based , stacked , or time-based SLEEP payloads in the 'id' paramete...
EUVD-2024-55820
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
CVE-2024-58393 i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
VulnCheck KEV: CVE-2024-58393
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
PT-2026-121353
Name of the Vulnerable Software and Affected Versions i-Netsolution Readymade Unilevel Ecommerce MLM version 2024-03-15 build Description An SQL injection flaw allows unauthenticated attackers to manipulate database queries. Attackers can extract database information by sending GET requests to th...
CVE-2024-58393: Improper Neutralization of Special Elements used in an SQL Command
i-Netsolution Readymade Unilevel Ecommerce MLM 2024-03-15 build contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-bas...
i-Netsolution Readymade Unilevel Ecommerce MLM SQL injection vulnerability
The i-netsolution Readymade Unilevel Ecommerce MLM version for 2024-03-15 contains an SQL injection vulnerability. This flaw stems from improper input validation of the id parameter in /product-details.php. Unauthorized attackers can exploit this by sending boolean, stack-based, or time-based SLE...
EUVD-2017-9043
Malware in sbrugna...
ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting Vulnerabilities
Readymade Unilevel Ecommerce MLM suffers from remote blind SQL injection and cross site scripting vulnerabilities. These issues affected the version released as late as March 15, 2024...
Readymade Job Portal Script SQL Injection Vulnerability
Readymade Job Portal Script suffers from a remote SQL injection vulnerability. The researcher requested version information from the vendor while reporting the vulnerability but the company has been unresponsive. ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...
CVE-2019-9605
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
CVE-2019-9604
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...
CVE-2019-9604
The CVE-2019-9604 entry concerns PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0, with a Cross-Site Request Forgery (CSRF) vulnerability affecting Edit Profile actions. The initial description specifies CSRF as the issue, and the connected records reaffirm the same vulnerability detail...
CVE-2019-9604: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...
PT-2019-19744
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0 Description The issue concerns a Reflected Cross-site Scripting XSS flaw. This occurs via the err value in a .ico picture upload. Recommendations For PHP Scripts Mall Online...
CVE-2019-9605: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
PT-2019-19743
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0 Description The issue concerns a Cross-Site Request Forgery CSRF flaw related to Edit Profile actions. Recommendations For PHP Scripts Mall Online Lottery PHP Readymade Script...
Scubez Posty Readymade Classifieds SQL Injection Vulnerability
Posty Scubez Posty Readymade Classifieds is a suite of announcement-based website scripts from Posty India. A SQL injection vulnerability exists in Posty Scubez Posty Readymade Classifieds. A remote attacker can exploit this vulnerability by sending the 'ID' parameter to the...