deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-4942
Published: 2017-12-13
Description: VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator.
CVSS Score: 4.9 (MEDIUM)
References: http://www.securityfocus.com/bid/102171; http://www.securitytracker.com/id/1040003; https://www.vmware.com/security/advisories/VMSA-2017-0020.html
CVE: CVE-2017-5530
Published: 2017-12-13
Description: The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.
CVSS Score: 8.1 (HIGH)
References: https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530; https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530
CVE: CVE-2017-5534
Published: 2017-12-13
Description: The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.
CVSS Score: 8.8 (HIGH)
References: https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5534; https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5534
CVE: CVE-2017-17538
Published: 2017-12-13
Description: MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.
CVSS Score: 7.5 (HIGH)
References: https://www.exploit-db.com/exploits/43317/; https://www.exploit-db.com/exploits/43317/
CVE: CVE-2017-17567
Published: 2017-12-13
Description: Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md
CVE: CVE-2017-17568
Published: 2017-12-13
Description: Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md
CVE: CVE-2017-17569
Published: 2017-12-13
Description: Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md
CVE: CVE-2017-17570
Published: 2017-12-13
Description: FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145297/FS-Expedia-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43261/; https://packetstormsecurity.com/files/145297/FS-Expedia-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17571
Published: 2017-12-13
Description: FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145298/FS-Foodpanda-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43262/; https://packetstormsecurity.com/files/145298/FS-Foodpanda-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17572
Published: 2017-12-13
Description: FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145303/FS-Amazon-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43259/; https://packetstormsecurity.com/files/145303/FS-Amazon-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17573
Published: 2017-12-13
Description: FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43256/; https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17574
Published: 2017-12-13
Description: FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145302/FS-Care-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43258/; https://packetstormsecurity.com/files/145302/FS-Care-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17575
Published: 2017-12-13
Description: FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145315/FS-Groupon-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43253/; https://packetstormsecurity.com/files/145315/FS-Groupon-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17576
Published: 2017-12-13
Description: FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145316/FS-Gigs-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43254/; https://packetstormsecurity.com/files/145316/FS-Gigs-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17577
Published: 2017-12-13
Description: FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145296/FS-Trademe-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43260/; https://packetstormsecurity.com/files/145296/FS-Trademe-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17578
Published: 2017-12-13
Description: FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145301/FS-Crowdfunding-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43257/; https://packetstormsecurity.com/files/145301/FS-Crowdfunding-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17579
Published: 2017-12-13
Description: FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145317/FS-Freelancer-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43255/; https://packetstormsecurity.com/files/145317/FS-Freelancer-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17580
Published: 2017-12-13
Description: FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145307/FS-Linkedin-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43249/; https://packetstormsecurity.com/files/145307/FS-Linkedin-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17581
Published: 2017-12-13
Description: FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145253/FS-Quibids-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43243/; https://packetstormsecurity.com/files/145253/FS-Quibids-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17582
Published: 2017-12-13
Description: FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43252/; https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17583
Published: 2017-12-13
Description: FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145252/FS-Shutterstock-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43242/; https://packetstormsecurity.com/files/145252/FS-Shutterstock-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17584
Published: 2017-12-13
Description: FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145289/FS-Makemytrip-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43246/; https://packetstormsecurity.com/files/145289/FS-Makemytrip-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17585
Published: 2017-12-13
Description: FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145255/FS-Monster-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43245/; https://packetstormsecurity.com/files/145255/FS-Monster-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17586
Published: 2017-12-13
Description: FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145254/FS-Olx-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43244/; https://packetstormsecurity.com/files/145254/FS-Olx-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17587
Published: 2017-12-13
Description: FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145308/FS-Indiamart-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43250/; https://packetstormsecurity.com/files/145308/FS-Indiamart-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17588
Published: 2017-12-13
Description: FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145313/FS-IMDB-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43251/; https://packetstormsecurity.com/files/145313/FS-IMDB-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17589
Published: 2017-12-13
Description: FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145250/FS-Thumbtack-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43240/; https://packetstormsecurity.com/files/145250/FS-Thumbtack-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17590
Published: 2017-12-13
Description: FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145251/FS-Stackoverflow-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43241/; https://packetstormsecurity.com/files/145251/FS-Stackoverflow-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-17591
Published: 2017-12-13
Description: Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145249/Realestate-Crowdfunding-Script-2.7.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43239/; https://packetstormsecurity.com/files/145249/Realestate-Crowdfunding-Script-2.7.2-SQL-Injection.html
CVE: CVE-2017-17592
Published: 2017-12-13
Description: Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145248/Website-Auction-Marketplace-2.0.5-SQL-Injection.html; https://www.exploit-db.com/exploits/43238/; https://packetstormsecurity.com/files/145248/Website-Auction-Marketplace-2.0.5-SQL-Injection.html
CVE: CVE-2017-17593
Published: 2017-12-13
Description: Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://packetstormsecurity.com/files/145247/Simple-Chatting-System-1.0.0-Arbitrary-File-Upload.html; https://www.exploit-db.com/exploits/43237/; https://packetstormsecurity.com/files/145247/Simple-Chatting-System-1.0.0-Arbitrary-File-Upload.html
CVE: CVE-2017-17594
Published: 2017-12-13
Description: DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145246/DomainSale-PHP-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43235/; https://packetstormsecurity.com/files/145246/DomainSale-PHP-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17595
Published: 2017-12-13
Description: Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145309/Beauty-Parlour-Booking-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43267/; https://packetstormsecurity.com/files/145309/Beauty-Parlour-Booking-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17596
Published: 2017-12-13
Description: Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145311/Entrepreneur-Job-Portal-Script-2.0.6-SQL-Injection.html; https://www.exploit-db.com/exploits/43275/; https://packetstormsecurity.com/files/145311/Entrepreneur-Job-Portal-Script-2.0.6-SQL-Injection.html
CVE: CVE-2017-17597
Published: 2017-12-13
Description: Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145290/Nearbuy-Clone-Script-3.2-SQL-Injection.html; https://www.exploit-db.com/exploits/43268/; https://packetstormsecurity.com/files/145290/Nearbuy-Clone-Script-3.2-SQL-Injection.html
CVE: CVE-2017-17598
Published: 2017-12-13
Description: Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145304/Affiliate-MLM-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43265/; https://packetstormsecurity.com/files/145304/Affiliate-MLM-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17599
Published: 2017-12-13
Description: Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43264/; https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html
CVE: CVE-2017-17600
Published: 2017-12-13
Description: Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145318/Basic-B2B-Script-2.0.8-SQL-Injection.html; https://www.exploit-db.com/exploits/43266/; https://packetstormsecurity.com/files/145318/Basic-B2B-Script-2.0.8-SQL-Injection.html
CVE: CVE-2017-17601
Published: 2017-12-13
Description: Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145291/Cab-Booking-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43269/; https://packetstormsecurity.com/files/145291/Cab-Booking-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17602
Published: 2017-12-13
Description: Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145299/Advance-B2B-Script-2.1.3-SQL-Injection.html; https://www.exploit-db.com/exploits/43263/; https://packetstormsecurity.com/files/145299/Advance-B2B-Script-2.1.3-SQL-Injection.html
CVE: CVE-2017-17603
Published: 2017-12-13
Description: Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145345/Advanced-Real-Estate-Script-4.0.7-SQL-Injection.html; https://www.exploit-db.com/exploits/43304/; https://packetstormsecurity.com/files/145345/Advanced-Real-Estate-Script-4.0.7-SQL-Injection.html
CVE: CVE-2017-17604
Published: 2017-12-13
Description: Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html; https://www.exploit-db.com/exploits/43305/; https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html
CVE: CVE-2017-17605
Published: 2017-12-13
Description: Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145310/Consumer-Complaints-Clone-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43274/; https://packetstormsecurity.com/files/145310/Consumer-Complaints-Clone-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17606
Published: 2017-12-13
Description: Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145292/Co-work-Space-Search-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43273/; https://packetstormsecurity.com/files/145292/Co-work-Space-Search-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17607
Published: 2017-12-13
Description: CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43272/; https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html
CVE: CVE-2017-17608
Published: 2017-12-13
Description: Child Care Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145294/Child-Care-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43271/; https://packetstormsecurity.com/files/145294/Child-Care-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17609
Published: 2017-12-13
Description: Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145295/Chartered-Accountant-Booking-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43270/; https://packetstormsecurity.com/files/145295/Chartered-Accountant-Booking-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17610
Published: 2017-12-13
Description: E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145305/E-commerce-MLM-Software-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43277/; https://packetstormsecurity.com/files/145305/E-commerce-MLM-Software-1.0-SQL-Injection.html
CVE: CVE-2017-17611
Published: 2017-12-13
Description: Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145312/Doctor-Search-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43276/; https://packetstormsecurity.com/files/145312/Doctor-Search-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17612
Published: 2017-12-13
Description: Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145324/Hot-Scripts-Clone-3.1-SQL-Injection.html; https://www.exploit-db.com/exploits/43284/; https://www.exploit-db.com/exploits/43916/
CVE: CVE-2017-17613
Published: 2017-12-13
Description: Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145323/Freelance-Website-Script-2.0.6-SQL-Injection.html; https://www.exploit-db.com/exploits/43283/; https://packetstormsecurity.com/files/145323/Freelance-Website-Script-2.0.6-SQL-Injection.html
CVE: CVE-2017-17614
Published: 2017-12-13
Description: Food Order Script 1.0 has SQL Injection via the /list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145321/Food-Order-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43281/; https://packetstormsecurity.com/files/145321/Food-Order-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17615
Published: 2017-12-13
Description: Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145320/Facebook-Clone-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43280/; https://packetstormsecurity.com/files/145320/Facebook-Clone-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17616
Published: 2017-12-13
Description: Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145306/Event-Search-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43279/; https://packetstormsecurity.com/files/145306/Event-Search-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17617
Published: 2017-12-13
Description: Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145325/Foodspotting-Clone-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43285/; https://packetstormsecurity.com/files/145325/Foodspotting-Clone-Script-1.0-SQL-Injection.html
CVE: CVE-2017-17618
Published: 2017-12-13
Description: Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/145326/Kickstarter-Clone-Script-2.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43286/; https://packetstormsecurity.com/files/145326/Kickstarter-Clone-Script-2.0-SQL-Injection.html