CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In December 2017

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
251 CVE-2017-17637 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
252 CVE-2017-17636 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
253 CVE-2017-17635 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.
254 CVE-2017-17634 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
255 CVE-2017-17633 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.
256 CVE-2017-17632 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
257 CVE-2017-17631 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
258 CVE-2017-17630 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
259 CVE-2017-17629 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.
260 CVE-2017-17628 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
261 CVE-2017-17627 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
262 CVE-2017-17626 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
263 CVE-2017-17625 89 Sql 2017-12-13 2020-03-10
7.5
 None Remote Low Not required Partial Partial Partial
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
264 CVE-2017-17624 89 Sql 2017-12-13 2018-01-02
7.5
 None Remote Low Not required Partial Partial Partial
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
265 CVE-2017-17623 89 Sql 2017-12-13 2017-12-29
7.5
 None Remote Low Not required Partial Partial Partial
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
266 CVE-2017-17622 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
267 CVE-2017-17621 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
268 CVE-2017-17620 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
269 CVE-2017-17619 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
270 CVE-2017-17618 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
271 CVE-2017-17617 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
272 CVE-2017-17616 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
273 CVE-2017-17615 89 Sql 2017-12-13 2017-12-26
6.5
 None Remote Low ??? Partial Partial Partial
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
274 CVE-2017-17614 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Food Order Script 1.0 has SQL Injection via the /list city parameter.
275 CVE-2017-17613 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
276 CVE-2017-17612 89 Sql 2017-12-13 2019-04-26
7.5
 None Remote Low Not required Partial Partial Partial
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
277 CVE-2017-17611 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
278 CVE-2017-17610 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
279 CVE-2017-17609 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
280 CVE-2017-17608 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Child Care Script 1.0 has SQL Injection via the /list city parameter.
281 CVE-2017-17607 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
282 CVE-2017-17606 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
283 CVE-2017-17605 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
284 CVE-2017-17604 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
285 CVE-2017-17603 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.
286 CVE-2017-17602 89 Sql 2017-12-13 2017-12-26
7.5
 None Remote Low Not required Partial Partial Partial
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
287 CVE-2017-17601 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
288 CVE-2017-17600 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
289 CVE-2017-17599 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.
290 CVE-2017-17598 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
291 CVE-2017-17597 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
292 CVE-2017-17596 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
293 CVE-2017-17595 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
294 CVE-2017-17594 89 Sql 2017-12-13 2017-12-22
7.5
 None Remote Low Not required Partial Partial Partial
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
295 CVE-2017-17593 434 2017-12-13 2019-10-03
5.0
 None Remote Low Not required None Partial None
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
296 CVE-2017-17592 89 Sql 2017-12-13 2017-12-21
7.5
 None Remote Low Not required Partial Partial Partial
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
297 CVE-2017-17591 89 Sql 2017-12-13 2017-12-21
7.5
 None Remote Low Not required Partial Partial Partial
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
298 CVE-2017-17590 89 Overflow Sql 2017-12-13 2017-12-20
7.5
 None Remote Low Not required Partial Partial Partial
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
299 CVE-2017-17589 89 Sql 2017-12-13 2020-09-29
7.5
 None Remote Low Not required Partial Partial Partial
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.
300 CVE-2017-17588 89 Sql 2017-12-13 2020-09-29
7.5
 None Remote Low Not required Partial Partial Partial
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id parameter.
Total number of vulnerabilities : 1110   Page : 1 2 3 4 5 6 (This Page)7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.