Vulnerabilities (CVE)

Filtered by CWE-89
Total 19919 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17587 1 Indiamart Clone Project 1 Indiamart Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.
CVE-2017-17586 1 Olx Clone Project 1 Olx Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
CVE-2017-17585 1 Monster Clone Project 1 Monster Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
CVE-2017-17584 1 Makemytrip Clone Project 1 Makemytrip Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
CVE-2017-17583 1 Shutterstock Clone Project 1 Shutterstock Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
CVE-2017-17582 1 Grubhub Clone Project 1 Grubhub Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17581 1 Quibids Clone Project 1 Quibids Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
CVE-2017-17580 1 Linkedin Clone Project 1 Linkedin Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.
CVE-2017-17579 1 Freelancer Clone Project 1 Freelancer Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
CVE-2017-17578 1 Crowdfunding Script Project 1 Crowdfunding Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
CVE-2017-17577 1 Trademe Clone Project 1 Trademe Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.
CVE-2017-17576 1 Gigs Script Project 1 Gigs Script 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.
CVE-2017-17575 1 Groupon Clone Project 1 Groupon Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
CVE-2017-17574 1 Care Clone Project 1 Care Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
CVE-2017-17573 1 Fortunescripts 1 Ebay Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.
CVE-2017-17572 1 Amazon Clone Project 1 Amazon Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
CVE-2017-17571 1 Foodpanda Clone Project 1 Foodpanda Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17570 1 Expedia Clone Project 1 Expedia Clone 2026-06-17 7.5 HIGH 9.8 CRITICAL
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.
CVE-2017-17567 1 Scubez 1 Posty Readymade Classifieds 2026-06-17 5.0 MEDIUM 7.5 HIGH
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
CVE-2017-17425 1 Quest 1 Netvault Backup 2026-06-17 7.5 HIGH 9.8 CRITICAL
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4237.