CVE-2017-17579

FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.

Source: CVE-2017-17579

CVE-2017-17584

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.

Source: CVE-2017-17584

CVE-2017-17583

FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.

Source: CVE-2017-17583

CVE-2017-17568

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.

Source: CVE-2017-17568

CVE-2017-17574

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

Source: CVE-2017-17574

CVE-2017-17572

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

Source: CVE-2017-17572

CVE-2017-17571

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.

Source: CVE-2017-17571

CVE-2017-17573

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

Source: CVE-2017-17573

CVE-2017-17581

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.

Source: CVE-2017-17581

CVE-2017-17582

FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.

Source: CVE-2017-17582