Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-89
Total 9311 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17608 1 Kindergarten - Elementary School Listing Script Project 1 Kindergarten - Elementary School Listing Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Child Care Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17602 1 Advance B2b Script Project 1 Advance B2b Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVE-2017-17619 1 Laundry Booking Script Project 1 Laundry Booking Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17620 1 Lawyer Search Script Project 1 Lawyer Search Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
CVE-2017-17618 1 Kickstarter Clone Script Project 1 Kickstarter Clone Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
CVE-2017-17617 1 Foodspotting Clone Script Project 1 Foodspotting Clone Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
CVE-2017-1606 1 Ibm 1 Financial Transaction Manager 2017-12-26 6.5 MEDIUM 8.8 HIGH
IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926.
CVE-2017-17615 1 Facebook Clone Script Project 1 Facebook Clone Script 2017-12-26 6.5 MEDIUM 8.8 HIGH
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
CVE-2017-17610 1 E-commerce Mlm Software Project 1 E-commerce Mlm Software 2017-12-26 7.5 HIGH 9.8 CRITICAL
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
CVE-2017-17613 1 Freelance Website Script Project 1 Freelance Website Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
CVE-2017-17642 1 Basic Job Site Script Project 1 Basic Job Site Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
CVE-2017-17640 1 Advanced World Database Project 1 Advanced World Database 2017-12-26 7.5 HIGH 9.8 CRITICAL
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
CVE-2017-17638 1 Groupon Clone Script Project 1 Groupon Clone Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
CVE-2017-17641 1 Resume Clone Script Project 1 Resume Clone Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
CVE-2017-17639 1 Muslim Matrimonial Script Project 1 Muslim Matrimonial Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
CVE-2017-17648 1 Entrepreneur Dating Script Project 1 Entrepreneur Dating Script 2017-12-26 7.5 HIGH 9.8 CRITICAL
Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.
CVE-2017-17603 1 Advanced Real Estate Script Project 1 Advanced Real Estate Script 2017-12-22 7.5 HIGH 9.8 CRITICAL
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
CVE-2017-17611 1 Doctor Search Script Project 1 Doctor Search Script 2017-12-22 7.5 HIGH 9.8 CRITICAL
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17604 1 Entrepreneur Bus Booking Script Project 1 Entrepreneur Bus Booking Script 2017-12-22 7.5 HIGH 9.8 CRITICAL
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
CVE-2017-17630 1 Yoga Class Script Project 1 Yoga Class Script 2017-12-22 7.5 HIGH 9.8 CRITICAL
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.