CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Entrepreneur Bus Booking Script version 3.0.4 has an SQL Injection vulnerability via the sourcebus parameter in the booker_details.php file.
The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.
Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.
Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Basic B2B Script version 2.0.8 has a SQL Injection vulnerability via the id parameter in the product_details.php file.
Advance Online Learning Management Script version 3.1 has a SQL Injection vulnerability via the subcatid or popcourseid parameter in courselist.php.
Affiliate MLM Script version 1.0 has a SQL Injection vulnerability via the key parameter in product-category.php.
Nearbuy Clone Script version 3.2 has a SQL Injection vulnerability via the category_list.php search parameter.
Entrepreneur Job Portal Script version 2.0.6 has an SQL Injection vulnerability via the rid1 parameter in the jobsearch_all.php file.
Beauty Parlour Booking Script version 1.0 has an SQL Injection vulnerability via the /list gender or city parameter.
DomainSale PHP Script version 1.0 has a SQL Injection vulnerability via the id parameter in domain.php.
Version 2.0.5 of Auction Marketplace is vulnerable to SQL Injection via the cat_id parameter in search.php.
Realestate Crowdfunding Script version 2.7.2 has an SQL Injection vulnerability via the pid parameter in single-cause.php.
FS Stackoverflow Clone version 1.0 has a SQL Injection vulnerability via the keywords parameter in the /question path.
FS Thumbtack Clone version 1.0 has a SQL Injection vulnerability via the cat parameter in browse-category.php and the sc parameter in browse-scategory.php.
FS IMDB Clone version 1.0 has a SQL Injection vulnerability via the f parameter in movie.php, s parameter in tvshow.php, or id parameter in show_misc_video.php.
FS Indiamart Clone version 1.0 has a SQL Injection vulnerability via the token parameter in catcompany.php, the id parameter in buyleads-details.php, or the c parameter in company/index.php.
FS Olx Clone version 1.0 has a SQL Injection vulnerability via the scat parameter in subpage.php or the pid parameter in message.php.
FS Monster Clone version 1.0 has a SQL Injection vulnerability via the id parameter in the Employer_Details.php file.
FS Makemytrip Clone version 1.0 has a SQL Injection vulnerability via the fl_orig or fl_dest parameters in the show-flight-result.php file.

