Vulnerabilities in n/a
161,455 resultsCVE-2017-17598—Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.EPSS 3.0%CVE-2017-17597—Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.EPSS 3.0%CVE-2017-17596—Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.EPSS 3.0%CVE-2017-17595—Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.EPSS 3.0%CVE-2017-17608—Child Care Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2017-17603—Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice pEPSS 3.0%CVE-2018-6024—SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.EPSS 3.0%CVE-2020-9487—In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a reqEPSS 3.0%CVE-2017-17609—Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.EPSS 3.0%CVE-2017-17610—E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.pEPSS 3.0%CVE-2017-17645—Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.EPSS 3.0%CVE-2018-6365—SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.EPSS 3.0%CVE-2017-17594—DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.EPSS 3.0%CVE-2017-17599—Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.EPSS 3.0%CVE-2017-17611—Doctor Search Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2017-17592—Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.EPSS 3.0%CVE-2018-6364—SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.EPSS 3.0%CVE-2017-17613—Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.EPSS 3.0%CVE-2017-9346—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectorEPSS 3.0%CVE-2017-15976—ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.EPSS 3.0%