CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- multiplex movie theater booking script project movie theater booking scriptMultiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid...9.8 Critical
- responsive events and movie ticket booking script project events and movie ticket booking scriptResponsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q...9.8 Critical
- multireligion responsive matrimonial project responsive matrimonialMultireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid...9.8 Critical
- yoga class script project class scriptYoga Class Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- secure e-commerce script project e-commerce scriptSecure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat...9.8 Critical
- responsive realestate script project realestate scriptResponsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.9.8 Critical
- readymade video sharing script project video sharing scriptReadymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php...9.8 Critical
- readymade php classified script project php classified scriptReadymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid...9.8 Critical
- on demand marketplace script project demand marketplace scriptProfessional Service Script 1.0 has SQL Injection via the service-list city parameter.9.8 Critical
- php multivendor ecommerce project multivendor ecommercePHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the...9.8 Critical
- opensource classified ads script project classified ads scriptOpensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.9.8 Critical
- online exam test application script project exam test application scriptOnline Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.9.8 Critical
- multivendor penny auction clone script project penny auction clone scriptMultivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.9.8 Critical
- lawyer search script project search scriptLawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.9.8 Critical
- laundry booking script project booking scriptLaundry Booking Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- kickstarter clone script project clone scriptKickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.9.8 Critical
- foodspotting clone script project clone scriptFoodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.9.8 Critical
- event calendar category script project calendar category scriptEvent Search Script 1.0 has SQL Injection via the /event-list city parameter.9.8 Critical
- facebook clone script project clone scriptFacebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.8.8 High
- hotel restaurant reviews and feedback script project restaurant reviews and feedback scriptFood Order Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- freelance website script project website scriptFreelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the...9.8 Critical
- hot scripts clone project scripts cloneHot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.9.8 Critical
- doctor search script project search scriptDoctor Search Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- e-commerce mlm software project mlm softwareE-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter,...9.8 Critical
- chartered accountant booking script project accountant booking scriptChartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.9.8 Critical
- kindergarten - elementary school listing script project - elementary school listing scriptChild Care Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- cms auditor website project auditor websiteCMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.9.8 Critical
- co-work space search script project space search scriptCo-work Space Search Script 1.0 has SQL Injection via the /list city parameter.9.8 Critical
- consumer complaints clone script project complaints clone scriptConsumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.9.8 Critical
- entrepreneur bus booking script project bus booking scriptEntrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus...9.8 Critical
- advanced real estate script project real estate scriptAdvanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain,...9.8 Critical
- advance b2b script project b2b scriptAdvance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view...9.8 Critical
- cab booking script project booking scriptCab Booking Script 1.0 has SQL Injection via the /service-list city parameter.9.8 Critical
- basic b2b script project b2b scriptBasic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.9.8 Critical
- advance online learning management script project online learning management scriptAdvance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid...9.8 Critical
- affiliate mlm script project mlm scriptAffiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.9.8 Critical
- nearbuy clone script project clone scriptNearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.9.8 Critical
- entrepreneur job portal script project job portal scriptEntrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.9.8 Critical
- beauty parlour booking script project parlour booking scriptBeauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.9.8 Critical
- domainsale php script project php scriptDomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.9.8 Critical
- simple chatting system project chatting systemSimple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places...7.5 High
- website auction marketplace project auction marketplaceWebsite Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.9.8 Critical
- realestate crowdfunding script project crowdfunding scriptRealestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.9.8 Critical
- stackoverflow-clone project stackoverflow-cloneFS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.9.8 Critical
- thumbtack clone project cloneFS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse...9.8 Critical
- imdb clone project cloneFS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or...9.8 Critical
- indiamart clone project cloneFS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details...9.8 Critical
- olx clone project cloneFS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid...9.8 Critical
- monster clone project cloneFS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.9.8 Critical
- makemytrip clone project cloneFS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest...9.8 Critical
- Show moreLoading…