CVE-2017-17577

FS Trademe Clone 1.0 contains a SQL Injection vulnerability. A remote attacker can exploit unsafely handled inputs in search_item.php (search parameter) or general_item_details.php (id parameter) to inject SQL commands. Root cause: inadequate input sanitization in PHP/MySQL-based scripts. Impact:...

FS Trademe Clone 1.0 SQL Injection

Exploit Title: FS Trademe Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/trademe-clone/ Demo: http://trademe-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx...