CVE Feed

Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.

E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.

MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.

Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.

FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.

Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.

CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.

Child Care Script 1.0 has SQL Injection via the /list city parameter.

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.

Doctor Search Script 1.0 has SQL Injection via the /list city parameter.

Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.

Food Order Script 1.0 has SQL Injection via the /list city parameter.

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.

Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.

Yoga Class Script 1.0 has SQL Injection via the /list city parameter.

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.