Vulnerabilities (CVE)

Filtered by CWE-89
Total 14188 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17585 1 Monster Clone Project 1 Monster Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
CVE-2017-17584 1 Makemytrip Clone Project 1 Makemytrip Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
CVE-2017-17582 1 Grubhub Clone Project 1 Grubhub Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17580 1 Linkedin Clone Project 1 Linkedin Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.
CVE-2017-17579 1 Freelancer Clone Project 1 Freelancer Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
CVE-2017-17581 1 Quibids Clone Project 1 Quibids Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
CVE-2017-17578 1 Crowdfunding Script Project 1 Crowdfunding Script 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
CVE-2017-17577 1 Trademe Clone Project 1 Trademe Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.
CVE-2017-17576 1 Gigs Script Project 1 Gigs Script 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.
CVE-2017-17574 1 Care Clone Project 1 Care Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
CVE-2017-17575 1 Groupon Clone Project 1 Groupon Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
CVE-2017-17572 1 Amazon Clone Project 1 Amazon Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
CVE-2017-17571 1 Foodpanda Clone Project 1 Foodpanda Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17570 1 Expedia Clone Project 1 Expedia Clone 2020-09-29 7.5 HIGH 9.8 CRITICAL
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.
CVE-2020-19447 1 Jdownloads 1 Jdownloads 2020-09-29 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
CVE-2020-13504 1 Aveva 1 Edna Enterprise Data Historian 2020-09-29 7.5 HIGH 9.8 CRITICAL
Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
CVE-2020-19450 1 Jdownloads 1 Jdownloads 2020-09-28 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
CVE-2020-19451 1 Jdownloads 1 Jdownloads 2020-09-28 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
CVE-2020-19455 1 Jdownloads 1 Jdownloads 2020-09-28 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
CVE-2020-13505 1 Aveva 1 Edna Enterprise Data Historian 2020-09-25 7.5 HIGH 9.8 CRITICAL
Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.