CVE-2017-17589

FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...

FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection

Exploit Title: FS Thumbtack Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/thumbtack-clone/ Demo: http://thumbtack-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on:...

FS Thumbtack Clone 1.0 - cat sc SQL Injection

FS Thumbtack Clone 1.0 - cat sc SQL Injection Exploit Title: FS Thumbtack Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/thumbtack-clone/ Demo: http://thumbtack-clone.demonstration.co.in/ Version:...