-
CVE-2017-17642
•
published on December 13, 2017
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
-
CVE-2017-17538
•
published on December 13, 2017
MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.
-
CVE-2017-17569
•
published on December 13, 2017
Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
-
CVE-2017-17571
•
published on December 13, 2017
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
-
CVE-2017-17577
•
published on December 13, 2017
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.
-
CVE-2017-17582
•
published on December 13, 2017
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
-
CVE-2017-17587
•
published on December 13, 2017
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.
-
CVE-2017-17590
•
published on December 13, 2017
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
-
CVE-2017-17591
•
published on December 13, 2017
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
-
CVE-2017-17567
•
published on December 13, 2017
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
-
CVE-2017-17576
•
published on December 13, 2017
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.
-
CVE-2017-17581
•
published on December 13, 2017
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
-
CVE-2017-17585
•
published on December 13, 2017
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
-
CVE-2017-17592
•
published on December 13, 2017
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
-
CVE-2017-17595
•
published on December 13, 2017
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
-
CVE-2017-17600
•
published on December 13, 2017
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
-
CVE-2017-17607
•
published on December 13, 2017
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
-
CVE-2017-17568
•
published on December 13, 2017
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
-
CVE-2017-17573
•
published on December 13, 2017
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.
-
CVE-2017-17574
•
published on December 13, 2017
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
