CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Professional Service Script version 1.0 has a SQL Injection vulnerability via the city parameter in the service list.
PHP Multivendor Ecommerce version 1.0 has an SQL Injection vulnerability via the sid parameter in single_detail.php and the searchcat or chid1 parameters in category.php.
Opensource Classified Ads Script version 3.2 has a SQL Injection vulnerability via the keyword parameter in advance_result.php.
The Online Exam Test Application Script version 1.6 has a SQL Injection vulnerability via the sort parameter in the exams.php file.
Multivendor Penny Auction Clone Script version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /detail URI.
Lawyer Search Script version 1.1 has a SQL Injection vulnerability via the city parameter in the /lawyer-list endpoint.
Laundry Booking Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Kickstarter Clone Script 2.0 has a SQL Injection vulnerability via the projid parameter in the investcalc.php file.
Foodspotting Clone Script version 1.0 has an SQL Injection vulnerability via the q parameter in quicksearch.php.
Event Search Script 1.0 has a SQL Injection vulnerability via the city parameter in the /event-list path.
Food Order Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Freelance Website Script version 2.0.6 has a SQL Injection vulnerability via the pr_id parameter in jobdetails.php or the catid parameter in searchbycat_list.php.
Hot Scripts Clone version 3.1 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Doctor Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.
Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Child Care Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.
Co-work Space Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Consumer Complaints Clone Script 1.0 has a SQL Injection vulnerability via the id parameter in the other-user-profile.php file.