Archive
13 December 2017
Vulnerabilities first published on this day (UTC), newest first.
80 results · Clear filters · Feed
-
Unscored —CVE-2017-1635 Public exploit
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use…
-
Unscored —
Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertex…
-
Unscored —CVE-2017-17648 Public exploit
Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid par…
-
Unscored —
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build…
-
Unscored —CVE-2017-17585 Public exploit
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
-
Unscored —CVE-2017-17615 Public exploit
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
-
Unscored —CVE-2017-17639 Public exploit
Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
-
Unscored —CVE-2017-17631 Public exploit
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
-
Unscored —CVE-2017-17619 Public exploit
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17576 Public exploit
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or s…
-
Unscored —CVE-2017-17578 Public exploit
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
-
Unscored —CVE-2017-17591 Public exploit
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
-
Unscored —CVE-2017-17628 Public exploit
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
-
Unscored —CVE-2017-17632 Public exploit
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
-
Unscored —CVE-2017-17637 Public exploit
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
-
Unscored —CVE-2017-17640 Public exploit
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country p…
-
Unscored —CVE-2017-17633 Public exploit
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php…
-
Unscored —CVE-2017-17593 Public exploit
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
-
Unscored —CVE-2017-17623 Public exploit
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
-
Unscored —CVE-2017-17635 Public exploit
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php ev…
-
Unscored —CVE-2017-17580 Public exploit
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details…
-
Unscored —CVE-2017-17612 Public exploit
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
-
Unscored —CVE-2017-17592 Public exploit
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
-
Unscored —CVE-2017-17625 Public exploit
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
-
Unscored —CVE-2017-17629 Public exploit
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_…
-
Unscored —CVE-2017-17598 Public exploit
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
-
Unscored —CVE-2017-17611 Public exploit
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17627 Public exploit
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
-
Unscored —CVE-2017-17620 Public exploit
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
-
Unscored —CVE-2017-17613 Public exploit
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cat…
-
Unscored —CVE-2017-17590 Public exploit
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
-
Unscored —CVE-2017-17634 Public exploit
Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
-
Unscored —CVE-2017-17584 Public exploit
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
-
Unscored —CVE-2017-17600 Public exploit
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
-
Unscored —CVE-2017-17577 Public exploit
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id para…
-
Unscored —CVE-2017-17538 Public exploit
MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.
-
Unscored —CVE-2017-17636 Public exploit
MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
-
Unscored —CVE-2017-17601 Public exploit
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
-
Unscored —CVE-2017-17574 Public exploit
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
-
Unscored —CVE-2017-17626 Public exploit
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.