2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14589 | — | — | 1.9% | Dec 13, 2017 | It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker ... |
| CVE-2017-17642 | — | — | 2.2% | Dec 13, 2017 | Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job. |
| CVE-2017-17641 | — | — | 2.2% | Dec 13, 2017 | Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter. |
| CVE-2017-17640 | — | — | 2.2% | Dec 13, 2017 | Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa... |
| CVE-2017-17639 | — | — | 2.2% | Dec 13, 2017 | Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter. |
| CVE-2017-17638 | — | — | 2.2% | Dec 13, 2017 | Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter. |
| CVE-2017-17637 | — | — | 2.2% | Dec 13, 2017 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. |
| CVE-2017-17636 | — | — | 2.2% | Dec 13, 2017 | MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. |
| CVE-2017-17635 | — | — | 2.2% | Dec 13, 2017 | MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eve... |
| CVE-2017-17634 | — | — | 2.2% | Dec 13, 2017 | Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. |
| CVE-2017-17633 | — | — | 2.2% | Dec 13, 2017 | Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php ... |
| CVE-2017-17632 | — | — | 2.2% | Dec 13, 2017 | Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. |
| CVE-2017-17631 | — | — | 2.2% | Dec 13, 2017 | Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter. |
| CVE-2017-17630 | — | — | 2.2% | Dec 13, 2017 | Yoga Class Script 1.0 has SQL Injection via the /list city parameter. |
| CVE-2017-17629 | — | — | 2.2% | Dec 13, 2017 | Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_d... |
| CVE-2017-17628 | — | — | 2.2% | Dec 13, 2017 | Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter. |
| CVE-2017-17627 | — | — | 2.2% | Dec 13, 2017 | Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter. |
| CVE-2017-17626 | — | — | 3.0% | Dec 13, 2017 | Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter. |
| CVE-2017-17625 | CRITICAL | 9.8 | 3.0% | Dec 13, 2017 | Professional Service Script 1.0 has SQL Injection via the service-list city parameter. |
| CVE-2017-17624 | — | — | 3.0% | Dec 13, 2017 | PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat o... |
| CVE-2017-17623 | — | — | 3.0% | Dec 13, 2017 | Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter. |
| CVE-2017-17622 | — | — | 3.6% | Dec 13, 2017 | Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter. |
| CVE-2017-17621 | — | — | 3.6% | Dec 13, 2017 | Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI. |
| CVE-2017-17620 | — | — | 3.0% | Dec 13, 2017 | Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter. |
| CVE-2017-17619 | — | — | 3.6% | Dec 13, 2017 | Laundry Booking Script 1.0 has SQL Injection via the /list city parameter. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now