CVE Vulnerability Catalog

Entrepreneur Dating Script version 2.0.1 has an SQL Injection vulnerability via the marital, gender, country, or profileid parameter in the search_result.php file.

Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker with the appropriate permissions can execute arbitrary code on systems running a vulnerable version of Bamboo Server.

There is a possibility of double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags. An attacker with restricted administrative rights to Bamboo can exploit this vulnerability to execute arbitrary Java code on systems running a vulnerable version of Bamboo.

Basic Job Site Script version 2.0.5 has a SQL Injection vulnerability via the keyword parameter to /job.

Resume Clone Script version 2.0.5 has a SQL Injection vulnerability via the id parameter in the preview.php file.

Advanced World Database version 2.0.5 has an SQL Injection vulnerability via the country or state parameter in city.php and the country parameter in state.php.

Muslim Matrimonial Script version 3.02 has an SQL Injection vulnerability via the succid parameter in the success-story.php file.

Groupon Clone Script version 3.01 has a SQL Injection vulnerability via the state_id parameter in the city_ajax.php file.

Car Rental Script version 2.0.4 has an SQL Injection vulnerability via the val parameter in the countrycode1.php file.

MLM Forced Matrix version 2.0.9 has a SQL Injection vulnerability via the newid parameter in the news-detail.php file.

MLM Forex Market Plan Script version 2.0.4 is vulnerable to SQL Injection via the newid parameter in news_detail.php and the eventid parameter in event_detail.php.

The Single Theater Booking Script version 3.2.1 has a SQL Injection vulnerability via the q parameter in the findcity.php file.

Multiplex Movie Theater Booking Script version 3.1.5 has an SQL Injection vulnerability via the moid parameter in trailer-detail.php, moid parameter in show-time.php, or eid parameter in event-detail.php.

The Responsive Events Movie Ticket Booking Script version 3.2.1 has an SQL Injection vulnerability via the q parameter in the findcity.php file.

Version 4.7.2 of Multireligion Responsive Matrimonial has an SQL Injection vulnerability via the succid parameter in the success-story.php file.

Yoga Class Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

Secure E-commerce Script version 2.0.1 is vulnerable to SQL Injection via the searchmain or searchcat parameters in category.php and the sid parameter in single_detail.php.

Responsive Realestate Script version 3.2 has a SQL Injection vulnerability via the tbud parameter in property-list.

Readymade Video Sharing Script version 3.2 has an SQL Injection vulnerability via the report_videos array parameter in single-video-detail.php.

Readymade PHP Classified Script version 3.3 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.