Vulnerability database

458 results · page 7 of 10

• Aug 9, 2018PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.CVE-2018-15184 · Other software · Naukri Clone Script Project · reported by MITREMedium 5.4

  PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.

  Product

  Naukri Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgkaim.comgkaim.com

• Aug 9, 2018PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.CVE-2018-15183 · Other software · Myperfectresume / Jobhero / Resume Clone Script Project · reported by MITREMedium 6.1

  PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.

  Product

  Myperfectresume / Jobhero / Resume Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgkaim.comgkaim.com

• Aug 3, 2018cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgiCVE-2018-14912 · Other software · Cgit Project · reported by MITREHigh 7.5

  cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.

  Product

  Cgit

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordbugs.chromium.orglists.debian.org

• Jul 10, 2018edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on prCVE-2018-13849 · Other software · Instagram-clone Project · reported by MITREMedium 6.1

  edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on preg_replace.

  Product

  Instagram-clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordcxsecurity.comexploit-db.com

• Jun 27, 2018In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's conCVE-2018-12907 · Other software · Rclone · reported by MITREHigh 7.5

  In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google, because there is no validation of a URL field received from the Google Cloud Storage API server, aka a "RESTLESS" issue.

  Product

  Rclone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordopenwall.comdanieldent.com

• May 28, 2018PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changinCVE-2018-11514 · Other software · Naukri Clone Script Project · reported by MITREHigh 8.8

  PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changing .docx to .php.

  Product

  Naukri Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordwhitehatck01.blogspot.comwhitehatck01.blogspot.com

• May 2, 2018partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related toCVE-2016-10722 · Other software · Partclone Project · reported by MITRECritical 9.8

  partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

  Product

  Partclone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recorddavid.gnedt.atgithub.com

• May 2, 2018partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header.CVE-2016-10721 · Other software · Partclone · reported by MITRECritical 9.8

  partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

  Product

  Partclone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgithub.comgithub.com

• Apr 12, 2018PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modiCVE-2018-6903 · Other software · HOT Scripts Clone Project · reported by MITREHigh 8.8

  PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.

  Product

  HOT Scripts Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD record0day4u.wordpress.com0day4u.wordpress.com

• Apr 9, 2018PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).CVE-2018-9857 · Other software · Match Clone Script Project · reported by MITREMedium 6.1

  PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).

  Product

  Match Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpastebin.comexploit-db.com

• Apr 5, 2018PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php.CVE-2018-9328 · Other software · Redbus Clone Script Project · reported by MITREMedium 6.1

  PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php.

  Product

  Redbus Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpastebin.compastebin.com

• Apr 5, 2018A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, CCVE-2018-1000153 · Websites & servers · Jenkins · reported by MITREHigh 8.8

  A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").

  Product

  Vsphere

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordjenkins.iojenkins.io

• Apr 5, 2018An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvCVE-2018-1000152 · Websites & servers · Jenkins · reported by MITREMedium 6.3

  An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").

  Product

  Vsphere

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordjenkins.iojenkins.io

• Mar 6, 2018PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User.CVE-2018-7650 · Other software · HOT Scripts Clone Project · reported by MITREMedium 4.8

  PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user's browser. This is different from CVE-2018-6878.

  Product

  HOT Scripts Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordneetech18.blogspot.inneetech18.blogspot.in

• Feb 23, 2018Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter.CVE-2018-6868 · Other software · Groupon Clone Script Project · reported by MITREMedium 5.4

  Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter.

  Product

  Groupon Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Feb 23, 2018Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter.CVE-2018-6867 · Other software · Alibaba Clone Script Project · reported by MITREMedium 5.4

  Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter.

  Product

  Alibaba Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comgithub.com

• Feb 17, 2018SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the endsCVE-2018-5987 · Other software · Social Pinboard Project · reported by MITRECritical 9.8

  SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVal parameter in a view=search action, or the uid parameter in a view=likes action.

  Product

  Social Pinboard

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Feb 14, 2018webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take CVE-2018-7032 · Other software · Myrepos Project · reported by MITREHigh 7.5

  webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack.

  Product

  Myrepos

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordbugs.debian.orgbugs.debian.org

• Feb 11, 2018Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script.CVE-2018-6858 · Other software · Facebook Clone Script Project · reported by MITREMedium 5.4

  Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script.

  Product

  Facebook Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Feb 11, 2018PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.CVE-2018-6845 · Other software · OLX Clone Script Project · reported by MITREMedium 6.1

  PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.

  Product

  OLX Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Feb 9, 2018Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field.CVE-2018-6878 · Other software · HOT Scripts Clone Project · reported by MITREMedium 5.4

  Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field.

  Product

  HOT Scripts Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Feb 7, 2018PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.CVE-2018-6795 · Other software · Naukri Clone Script Project · reported by MITREMedium 5.4

  PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.

  Product

  Naukri Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordexploit-db.comexploit-db.com

• Jan 29, 2018SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_events.php category pCVE-2018-6367 · Other software · Vastal · reported by MITRECritical 9.8

  SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_events.php category parameter.

  Product

  I-tech Buddy Zone Facebook Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Jan 29, 2018SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.CVE-2018-6363 · Other software · Taskrabbit Clone Project · reported by MITRECritical 9.8

  SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

  Product

  Taskrabbit Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 27, 2017PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.CVE-2017-17931 · Other software · Resume Clone Script Project · reported by MITRECritical 9.8

  PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.

  Product

  Resume Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgithub.comgithub.com

• Dec 27, 2017FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.CVE-2017-17904 · Other software · Fortunescripts · reported by MITREMedium 5.4

  FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.

  Product

  Lynda Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgithub.comgithub.com

• Dec 27, 2017FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.CVE-2017-17903 · Other software · Fortunescripts · reported by MITREHigh 8.8

  FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

  Product

  Lynda Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordgithub.comgithub.com

• Dec 18, 2017FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.CVE-2017-17643 · Other software · Lynda Clone Project · reported by MITRECritical 9.8

  FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

  Product

  Lynda Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.CVE-2017-17641 · Other software · Resume Clone Script Project · reported by MITRECritical 9.8

  Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.

  Product

  Resume Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.CVE-2017-17638 · Other software · Groupon Clone Script Project · reported by MITRECritical 9.8

  Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.

  Product

  Groupon Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.CVE-2017-17621 · Other software · Multivendor Penny Auction Clone Script Project · reported by MITRECritical 9.8

  Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

  Product

  Multivendor Penny Auction Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.compacketstormsecurity.com

• Dec 13, 2017Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.CVE-2017-17618 · Other software · Kickstarter Clone Script Project · reported by MITRECritical 9.8

  Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

  Product

  Kickstarter Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.CVE-2017-17617 · Other software · Foodspotting Clone Script Project · reported by MITRECritical 9.8

  Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

  Product

  Foodspotting Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.CVE-2017-17615 · Other software · Facebook Clone Script Project · reported by MITREHigh 8.8

  Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.

  Product

  Facebook Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.CVE-2017-17612 · Other software · HOT Scripts Clone Project · reported by MITRECritical 9.8

  Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.

  Product

  HOT Scripts Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.CVE-2017-17605 · Other software · Consumer Complaints Clone Script Project · reported by MITRECritical 9.8

  Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.

  Product

  Consumer Complaints Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.CVE-2017-17597 · Other software · Nearbuy Clone Script Project · reported by MITRECritical 9.8

  Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.

  Product

  Nearbuy Clone Script

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.CVE-2017-17590 · Other software · Stackoverflow-clone Project · reported by MITRECritical 9.8

  FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.

  Product

  Stackoverflow-clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.CVE-2017-17589 · Other software · Thumbtack Clone Project · reported by MITRECritical 9.8

  FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.

  Product

  Thumbtack Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.CVE-2017-17588 · Other software · Imdb Clone Project · reported by MITRECritical 9.8

  FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.

  Product

  Imdb Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.CVE-2017-17587 · Other software · Indiamart Clone Project · reported by MITRECritical 9.8

  FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.

  Product

  Indiamart Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.CVE-2017-17586 · Other software · OLX Clone Project · reported by MITRECritical 9.8

  FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

  Product

  OLX Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.CVE-2017-17585 · Other software · Monster Clone Project · reported by MITRECritical 9.8

  FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

  Product

  Monster Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.CVE-2017-17584 · Other software · Makemytrip Clone Project · reported by MITRECritical 9.8

  FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.

  Product

  Makemytrip Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.CVE-2017-17583 · Other software · Shutterstock Clone Project · reported by MITRECritical 9.8

  FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.

  Product

  Shutterstock Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.CVE-2017-17582 · Other software · Grubhub Clone Project · reported by MITRECritical 9.8

  FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.

  Product

  Grubhub Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.CVE-2017-17581 · Other software · Quibids Clone Project · reported by MITRECritical 9.8

  FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.

  Product

  Quibids Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.CVE-2017-17580 · Other software · Linkedin Clone Project · reported by MITRECritical 9.8

  FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.

  Product

  Linkedin Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.CVE-2017-17579 · Other software · Freelancer Clone Project · reported by MITRECritical 9.8

  FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.

  Product

  Freelancer Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

• Dec 13, 2017FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.CVE-2017-17577 · Other software · Trademe Clone Project · reported by MITRECritical 9.8

  FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.

  Product

  Trademe Clone

  What to do

  Apply the vendor’s update. The NVD record links to the advisory.

  Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.