Archive
13 December 2017
Vulnerabilities first published on this day (UTC), newest first.
80 results · Clear filters · Feed
-
Unscored —CVE-2017-17642 Public exploit
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
-
Unscored —CVE-2017-17609 Public exploit
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
-
Unscored —CVE-2017-17573 Public exploit
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id …
-
Unscored —CVE-2017-17621 Public exploit
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
-
Unscored —CVE-2017-17608 Public exploit
Child Care Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17599 Public exploit
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid paramete…
-
Unscored —CVE-2017-17604 Public exploit
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
-
Unscored —CVE-2017-17571 Public exploit
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
-
Unscored —CVE-2017-17581 Public exploit
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
-
Unscored —CVE-2017-17587 Public exploit
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or …
-
Unscored —CVE-2017-17594 Public exploit
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
-
Unscored —CVE-2017-17617 Public exploit
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
-
Unscored —CVE-2017-17570 Public exploit
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_…
-
Unscored —CVE-2017-17575 Public exploit
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
-
Unscored —CVE-2017-17597 Public exploit
Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
-
Unscored —CVE-2017-17596 Public exploit
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
-
Unscored —CVE-2017-17589 Public exploit
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc param…
-
Unscored —CVE-2017-17605 Public exploit
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
-
Unscored —CVE-2017-17630 Public exploit
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17610 Public exploit
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parame…
-
Unscored —CVE-2017-17641 Public exploit
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
-
Unscored —CVE-2017-17579 Public exploit
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
-
Unscored —CVE-2017-17614 Public exploit
Food Order Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17606 Public exploit
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17582 Public exploit
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
-
Unscored —CVE-2017-17638 Public exploit
Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
-
Unscored —CVE-2017-17586 Public exploit
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
-
Unscored —CVE-2017-17622 Public exploit
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
-
Unscored —CVE-2017-17595 Public exploit
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
-
Unscored —CVE-2017-17602 Public exploit
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
-
Unscored —CVE-2017-17616 Public exploit
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
-
Unscored —CVE-2017-17624 Public exploit
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat …
-
Unscored —CVE-2017-17618 Public exploit
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
-
Unscored —CVE-2017-17583 Public exploit
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
-
Unscored —CVE-2017-17603 Public exploit
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell…
-
Unscored —CVE-2017-17588 Public exploit
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id pa…
-
Unscored —CVE-2017-17572 Public exploit
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
-
Unscored —CVE-2017-17607 Public exploit
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
-
High 7.5
wolfSSL Bleichenbacher/ROBOT
wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."
-
High 7.5
BouncyCastle JCE TLS Bleichenbacher/ROBOT
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th…