107 matches found
CVE-2018-11501
PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...
CVE-2018-6928
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...
CVE-2018-6928
CVE-2018-6928 affects PHP Scripts Mall News Website Script 2.0.4, with a SQL Injection vulnerability in the search term parameter. Root cause is improper handling of user input allowing unauthorized SQL execution. Impact per sources is high: potential leakage of data, data alteration, and disrupt...
CVE-2018-6928
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...
CVE-2018-6928: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...
PT-2018-17826
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall News Website Script version 2.0.4 Description The issue is related to SQL Injection, which can be triggered via a search term. This allows an attacker to inject malicious SQL code, potentially leading to unauthorized access or...
Matrimonial Website Script 2.1.6 SQL Injection
Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection Dork: N/A Date: 2018-02-03 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/matrimonial-website-script/ Version: 2.1.6 Category: Webapps CVE: N/A...
Matrimonial Website Script 2.1.6 - uid SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage: https://www.phpscriptsmall.com/product/matrimonial-website-script/ Version: 2.1.6 Category: Webapps...
Matrimonial Website Script 2.1.6 - uid SQL Injection
Matrimonial Website Script 2.1.6 - uid SQL Injection Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection Dork: N/A Date: 2018-02-03 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...
Matrimonial Website Script 2.1.6 - 'uid' SQL Injection
Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection Dork: N/A Date: 2018-02-03 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage: https://www.phpscriptsmall.com/product/matrimonial-website-script/ Version: 2.1.6 Category: Webapps CVE: N/A...
PHP Scripts Mall Freelance Website Script SQL Injection Vulnerability
PHP Scripts Mall Freelance Website Script is a set of PHP based freelance online job search, recruitment website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Freelance Website Script version 2.0.6. The vulnerability can be exploited to inject SQL...
CVE-2017-17613
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...
CVE-2017-17613
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...
Sql injection
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...
CVE-2017-17613
CVE-2017-17613 affects the Freelance Website Script 2.0.6. The vulnerability is a SQL Injection exposed via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter. Public records (NVD, CNVD, CVE List) confirm the injection point; exploitation exists per exploit-db entries ...
CVE-2017-17613: Improper Neutralization of Special Elements used in an SQL Command
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...
PT-2017-14909
Name of the Vulnerable Software and Affected Versions Freelance Website Script version 2.0.6 Description The issue is related to SQL Injection, which can be exploited via the pr id parameter in the "jobdetails.php" endpoint or the catid parameter in the "searchbycat list.php" endpoint...
Freelance Website Script 2.0.6 - pr_id / catid SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6 Category:...
Freelance Website Script 2.0.6 - pr_id catid SQL Injection
Freelance Website Script 2.0.6 - prid catid SQL Injection Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6...
Law Firm Website Script 1.0 SQL Injection
Exploit Title: Law Firm Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/law-firm-website Demo: http://lawwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CV...