) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Search Type: Search All
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2017-17609 |
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17608 |
Child Care Script 1.0 has SQL Injection via the /list city parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17607 |
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17606 |
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17605 |
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17604 |
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17603 |
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17602 |
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17601 |
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17600 |
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17599 |
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17598 |
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17597 |
Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17596 |
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17595 |
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17594 |
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17593 |
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 7.5 HIGH V2.0: 5.0 MEDIUM |
| CVE-2017-17592 |
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17591 |
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2017-17590 |
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter. Published: December 13, 2017; 4:29:01 AM -0500 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |