Vulnerabilities (CVE)

Filtered by CWE-89
Total 20784 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17634 1 Single Theater Booking Script Project 1 Single Theater Booking Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVE-2017-17633 1 Multiplex Movie Theater Booking Script Project 1 Multiplex Movie Theater Booking Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.
CVE-2017-17632 1 Responsive Events And Movie Ticket Booking Script Project 1 Responsive Events And Movie Ticket Booking Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVE-2017-17631 1 Multireligion Responsive Matrimonial Project 1 Multireligion Responsive Matrimonial 2026-06-17 7.5 HIGH 9.8 CRITICAL
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
CVE-2017-17630 1 Yoga Class Script Project 1 Yoga Class Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17629 1 Secure E-commerce Script Project 1 Secure E-commerce Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
CVE-2017-17628 1 Responsive Realestate Script Project 1 Responsive Realestate Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
CVE-2017-17627 1 Readymade Video Sharing Script Project 1 Readymade Video Sharing Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
CVE-2017-17626 1 Readymade Php Classified Script Project 1 Readymade Php Classified Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
CVE-2017-17625 1 On Demand Marketplace Script Project 1 On Demand Marketplace Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
CVE-2017-17624 1 Php Multivendor Ecommerce Project 1 Php Multivendor Ecommerce 2026-06-17 7.5 HIGH 9.8 CRITICAL
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
CVE-2017-17623 1 Opensource Classified Ads Script Project 1 Opensource Classified Ads Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
CVE-2017-17622 1 Online Exam Test Application Script Project 1 Online Exam Test Application Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
CVE-2017-17621 1 Multivendor Penny Auction Clone Script Project 1 Multivendor Penny Auction Clone Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
CVE-2017-17620 1 Lawyer Search Script Project 1 Lawyer Search Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
CVE-2017-17619 1 Laundry Booking Script Project 1 Laundry Booking Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17618 1 Kickstarter Clone Script Project 1 Kickstarter Clone Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
CVE-2017-17617 1 Foodspotting Clone Script Project 1 Foodspotting Clone Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
CVE-2017-17616 1 Event Calendar Category Script Project 1 Event Calendar Category Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
CVE-2017-17615 1 Facebook Clone Script Project 1 Facebook Clone Script 2026-06-17 6.5 MEDIUM 8.8 HIGH
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.