CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Kickstarter Clone Script 2.0 has a SQL Injection vulnerability via the projid parameter in the investcalc.php file.
Foodspotting Clone Script version 1.0 has an SQL Injection vulnerability via the q parameter in quicksearch.php.
Event Search Script 1.0 has a SQL Injection vulnerability via the city parameter in the /event-list path.
Food Order Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Freelance Website Script version 2.0.6 has a SQL Injection vulnerability via the pr_id parameter in jobdetails.php or the catid parameter in searchbycat_list.php.
Hot Scripts Clone version 3.1 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Doctor Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.
Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Child Care Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.
Co-work Space Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Consumer Complaints Clone Script 1.0 has a SQL Injection vulnerability via the id parameter in the other-user-profile.php file.
Entrepreneur Bus Booking Script version 3.0.4 has an SQL Injection vulnerability via the sourcebus parameter in the booker_details.php file.
The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.
Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.
Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Basic B2B Script version 2.0.8 has a SQL Injection vulnerability via the id parameter in the product_details.php file.
Advance Online Learning Management Script version 3.1 has a SQL Injection vulnerability via the subcatid or popcourseid parameter in courselist.php.
Affiliate MLM Script version 1.0 has a SQL Injection vulnerability via the key parameter in product-category.php.

