WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2017-12-31✕
Overview 21,015 matches · 194 in Waratek scope · 45 protected · 0 exploited · 0 CISA KEV · 1,103 EPSS ≥ 0.5
21,015matches 194in Waratek scope0.9% 45protected0.2% 0exploited0.0% 0CISA KEV0.0% 1,103EPSS ≥ 0.55.2%
Protected by Waratek 45 0.2% Rule in development 0 0.0% Mitigation candidate 149 0.7% No exploit published 0 0.0% Outside Waratek scope 93 0.4% Not applicable 20,641 98.2% Withdrawn CVE 87 0.4%
Critical 445 2.1% High 10,828 51.5% Medium 9,072 43.2% Low 583 2.8% None 0 0.0% Unknown 87 0.4%
blocked by ARMR today 45 0.2% partly blocked 0 0.0% not blocked 20,970 99.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 21,015 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2,591 / year
Withdrawn CVE: 87Not applicable: 20,641Outside Waratek scope: 93Mitigation candidate: 149Protected by Waratek: 45 Unknown: 87Low: 583Medium: 9,072High: 10,828Critical: 445 not blocked: 20,970blocked by ARMR today: 45 Working exploit published: 21,015
19881 Not applicable1 High1 not blocked1 Working exploit published1 19890 19901 Not applicable1 Medium1 not blocked1 Working exploit published1 19912 Not applicable2 High2 not blocked2 Working exploit published2 19920 19930 19946 Not applicable6 High3 Medium2 Low1 not blocked6 Working exploit published6 19955 Not applicable5 Critical1 High2 Medium2 not blocked5 Working exploit published5 199618 Not applicable17 Withdrawn CVE1 High12 Medium5 Unknown1 not blocked18 Working exploit published18 199773 Not applicable73 High51 Medium18 Low4 not blocked73 Working exploit published73 199850 Not applicable50 Critical1 High33 Medium11 Low5 not blocked50 Working exploit published50 1999282 Outside Waratek scope1 Not applicable280 Withdrawn CVE1 Critical2 High132 Medium119 Low28 Unknown1 not blocked282 Working exploit published282 2000427 Mitigation candidate6 Outside Waratek scope1 Not applicable420 Critical1 High197 Medium195 Low34 not blocked427 Working exploit published427 2001480 Mitigation candidate2 Outside Waratek scope4 Not applicable474 Critical4 High219 Medium219 Low38 not blocked480 Working exploit published480 2002545 Mitigation candidate8 Outside Waratek scope4 Not applicable531 Withdrawn CVE2 Critical3 High276 Medium246 Low18 Unknown2 not blocked545 Working exploit published545 2003499 Protected by Waratek1 Mitigation candidate7 Outside Waratek scope2 Not applicable488 Withdrawn CVE1 Critical3 High236 Medium243 Low16 Unknown1 blocked by ARMR today1 not blocked498 Working exploit published499 2004755 Mitigation candidate1 Outside Waratek scope1 Not applicable753 Critical3 High302 Medium414 Low36 not blocked755 Working exploit published755 20051,341 Protected by Waratek1 Mitigation candidate4 Outside Waratek scope4 Not applicable1,327 Withdrawn CVE5 Critical4 High658 Medium622 Low52 Unknown5 blocked by ARMR today1 not blocked1,340 Working exploit published1,341 20062,440 Protected by Waratek1 Mitigation candidate4 Outside Waratek scope7 Not applicable2,425 Withdrawn CVE3 Critical4 High1,197 Medium1,137 Low99 Unknown3 blocked by ARMR today1 not blocked2,439 Working exploit published2,440 20072,495 Protected by Waratek1 Mitigation candidate10 Outside Waratek scope11 Not applicable2,470 Withdrawn CVE3 Critical6 High1,405 Medium1,052 Low29 Unknown3 blocked by ARMR today1 not blocked2,494 Working exploit published2,495 20082,518 Protected by Waratek3 Mitigation candidate9 Outside Waratek scope6 Not applicable2,495 Withdrawn CVE5 Critical4 High1,492 Medium987 Low30 Unknown5 blocked by ARMR today3 not blocked2,515 Working exploit published2,518 20092,591 Protected by Waratek4 Mitigation candidate12 Outside Waratek scope9 Not applicable2,560 Withdrawn CVE6 Critical5 High1,424 Medium1,123 Low33 Unknown6 blocked by ARMR today4 not blocked2,587 Working exploit published2,591 20101,313 Protected by Waratek3 Mitigation candidate11 Outside Waratek scope7 Not applicable1,290 Withdrawn CVE2 Critical6 High730 Medium547 Low28 Unknown2 blocked by ARMR today3 not blocked1,310 Working exploit published1,313 2011691 Protected by Waratek2 Mitigation candidate9 Outside Waratek scope5 Not applicable672 Withdrawn CVE3 Critical1 High380 Medium294 Low13 Unknown3 blocked by ARMR today2 not blocked689 Working exploit published691 2012831 Mitigation candidate19 Outside Waratek scope9 Not applicable798 Withdrawn CVE5 Critical2 High316 Medium475 Low33 Unknown5 not blocked831 Working exploit published831 2013520 Protected by Waratek3 Mitigation candidate14 Outside Waratek scope10 Not applicable473 Withdrawn CVE20 Critical2 High241 Medium237 Low20 Unknown20 blocked by ARMR today3 not blocked517 Working exploit published520 2014795 Protected by Waratek4 Mitigation candidate10 Outside Waratek scope1 Not applicable769 Withdrawn CVE11 Critical2 High340 Medium415 Low27 Unknown11 blocked by ARMR today4 not blocked791 Working exploit published795 2015647 Protected by Waratek4 Mitigation candidate4 Outside Waratek scope6 Not applicable628 Withdrawn CVE5 Critical4 High351 Medium254 Low33 Unknown5 blocked by ARMR today4 not blocked643 Working exploit published647 2016429 Protected by Waratek7 Mitigation candidate11 Not applicable407 Withdrawn CVE4 Critical61 High238 Medium122 Low4 Unknown4 blocked by ARMR today7 not blocked422 Working exploit published429 20171,260 Protected by Waratek11 Mitigation candidate8 Outside Waratek scope5 Not applicable1,226 Withdrawn CVE10 Critical326 High590 Medium332 Low2 Unknown10 blocked by ARMR today11 not blocked1,249 Working exploit published1,260
1990199319961999200220052008201120142017
21,015 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 211 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-18001 Critical 2017-12-31 Not applicable Working exploit published Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
CVE-2017-17968 Critical 2017-12-29 Not applicable Working exploit published A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.
CVE-2015-3302 High 2017-12-29 Not applicable Working exploit published The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."
CVE-2017-17932 Critical 2017-12-28 Not applicable Working exploit published A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.
CVE-2017-15667 High 2017-12-28 Not applicable Working exploit published In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9221.
CVE-2015-7889 Medium 2017-12-28 Not applicable Working exploit published The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.
CVE-2017-7154 Medium 2017-12-27 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (system crash).
CVE-2017-17876 High 2017-12-27 Not applicable Working exploit published Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.
CVE-2017-17875 Critical 2017-12-27 Not applicable Working exploit published The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.
CVE-2017-17874 High 2017-12-27 Not applicable Working exploit published Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.
CVE-2017-17873 Critical 2017-12-27 Not applicable Working exploit published Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
CVE-2017-17872 Critical 2017-12-27 Not applicable Working exploit published The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.
CVE-2017-17871 Critical 2017-12-27 Not applicable Working exploit published The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.
CVE-2017-17870 Critical 2017-12-27 Not applicable Working exploit published The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.
CVE-2017-17849 Critical 2017-12-27 Not applicable Working exploit published A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.
CVE-2017-16995 High 2017-12-27 Not applicable Working exploit published The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
CVE-2017-13056 High 2017-12-27 Not applicable Working exploit published The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2016-6914 High 2017-12-27 Not applicable Working exploit published Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.
CVE-2017-13878 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).
CVE-2017-13876 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-13875 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.
CVE-2017-13869 Medium 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVE-2017-13868 Medium 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVE-2017-13867 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-13865 Medium 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVE-2017-13861 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-13855 Medium 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app that triggers type confusion.
CVE-2017-13847 High 2017-12-25 Not applicable Working exploit published An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-17692 High 2017-12-21 Not applicable Working exploit published Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.
CVE-2017-5255 High 2017-12-20 Not applicable Working exploit published In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.
CVE-2017-17752 Medium 2017-12-20 Not applicable Working exploit published Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.
CVE-2012-2576 Critical 2017-12-20 Not applicable Working exploit published SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
CVE-2017-17759 Critical 2017-12-19 Not applicable Working exploit published Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).
CVE-2017-17088 High 2017-12-19 Not applicable Working exploit published The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service.
CVE-2017-16949 Critical 2017-12-19 Not applicable Working exploit published An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.
CVE-2017-15049 High 2017-12-19 Not applicable Working exploit published The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
CVE-2017-15048 High 2017-12-19 Not applicable Working exploit published Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
CVE-2017-17739 Critical 2017-12-18 Not applicable Working exploit published The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.
CVE-2017-17738 High 2017-12-18 Not applicable Working exploit published The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.
CVE-2017-17737 Medium 2017-12-18 Not applicable Working exploit published The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.
CVE-2017-17721 Critical 2017-12-18 Not applicable Working exploit published CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.
CVE-2017-17651 Critical 2017-12-18 Not applicable Working exploit published Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.
CVE-2017-17649 Medium 2017-12-18 Not applicable Working exploit published Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
CVE-2017-17645 Critical 2017-12-18 Not applicable Working exploit published Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
CVE-2017-17643 Critical 2017-12-18 Not applicable Working exploit published FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.
CVE-2017-3195 Critical 2017-12-16 Not applicable Working exploit published Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.
CVE-2017-17405 High 2017-12-15 Not applicable Working exploit published Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.
CVE-2017-16787 Medium 2017-12-15 Not applicable Working exploit published The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access.
CVE-2017-5264 High 2017-12-14 Not applicable Working exploit published Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, and are susceptible to a cross-site request forgery (CSRF) attack.
CVE-2017-17672 Critical 2017-12-14 Not applicable Working exploit published In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Template's cacheTemplates() function, which is a publicly exposed API. This is exploited with the templateidlist parameter to ajax/api/template/cacheTemplates.
CVE-2017-17648 Critical 2017-12-13 Not applicable Working exploit published Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.
CVE-2017-17642 Critical 2017-12-13 Not applicable Working exploit published Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
CVE-2017-17641 Critical 2017-12-13 Not applicable Working exploit published Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
CVE-2017-17640 Critical 2017-12-13 Not applicable Working exploit published Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
CVE-2017-17639 Critical 2017-12-13 Not applicable Working exploit published Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
CVE-2017-17638 Critical 2017-12-13 Not applicable Working exploit published Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
CVE-2017-17637 Critical 2017-12-13 Not applicable Working exploit published Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
CVE-2017-17636 Critical 2017-12-13 Not applicable Working exploit published MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
CVE-2017-17635 Critical 2017-12-13 Not applicable Working exploit published MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.
CVE-2017-17634 Critical 2017-12-13 Not applicable Working exploit published Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVE-2017-17633 Critical 2017-12-13 Not applicable Working exploit published Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.
CVE-2017-17632 Critical 2017-12-13 Not applicable Working exploit published Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
CVE-2017-17631 Critical 2017-12-13 Not applicable Working exploit published Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
CVE-2017-17630 Critical 2017-12-13 Not applicable Working exploit published Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17629 Critical 2017-12-13 Not applicable Working exploit published Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
CVE-2017-17628 Critical 2017-12-13 Not applicable Working exploit published Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
CVE-2017-17627 Critical 2017-12-13 Not applicable Working exploit published Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
CVE-2017-17626 Critical 2017-12-13 Not applicable Working exploit published Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
CVE-2017-17625 Critical 2017-12-13 Not applicable Working exploit published Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
CVE-2017-17624 Critical 2017-12-13 Not applicable Working exploit published PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
CVE-2017-17623 Critical 2017-12-13 Not applicable Working exploit published Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
CVE-2017-17622 Critical 2017-12-13 Not applicable Working exploit published Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
CVE-2017-17621 Critical 2017-12-13 Not applicable Working exploit published Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
CVE-2017-17620 Critical 2017-12-13 Not applicable Working exploit published Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
CVE-2017-17619 Critical 2017-12-13 Not applicable Working exploit published Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17618 Critical 2017-12-13 Not applicable Working exploit published Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
CVE-2017-17617 Critical 2017-12-13 Not applicable Working exploit published Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
CVE-2017-17616 Critical 2017-12-13 Not applicable Working exploit published Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
CVE-2017-17615 High 2017-12-13 Not applicable Working exploit published Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
CVE-2017-17614 Critical 2017-12-13 Not applicable Working exploit published Food Order Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17613 Critical 2017-12-13 Not applicable Working exploit published Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
CVE-2017-17612 Critical 2017-12-13 Not applicable Working exploit published Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
CVE-2017-17611 Critical 2017-12-13 Not applicable Working exploit published Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17610 Critical 2017-12-13 Not applicable Working exploit published E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
CVE-2017-17609 Critical 2017-12-13 Not applicable Working exploit published Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
CVE-2017-17608 Critical 2017-12-13 Not applicable Working exploit published Child Care Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17607 Critical 2017-12-13 Not applicable Working exploit published CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
CVE-2017-17606 Critical 2017-12-13 Not applicable Working exploit published Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
CVE-2017-17605 Critical 2017-12-13 Not applicable Working exploit published Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
CVE-2017-17604 Critical 2017-12-13 Not applicable Working exploit published Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
CVE-2017-17603 Critical 2017-12-13 Not applicable Working exploit published Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
CVE-2017-17602 Critical 2017-12-13 Not applicable Working exploit published Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVE-2017-17601 Critical 2017-12-13 Not applicable Working exploit published Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
CVE-2017-17600 Critical 2017-12-13 Not applicable Working exploit published Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
CVE-2017-17599 Critical 2017-12-13 Not applicable Working exploit published Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.
CVE-2017-17598 Critical 2017-12-13 Not applicable Working exploit published Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
CVE-2017-17597 Critical 2017-12-13 Not applicable Working exploit published Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
CVE-2017-17596 Critical 2017-12-13 Not applicable Working exploit published Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
CVE-2017-17595 Critical 2017-12-13 Not applicable Working exploit published Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
CVE-2017-17594 Critical 2017-12-13 Not applicable Working exploit published DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
‹ prev page 1 of 211 next ›