2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-17593——Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
CVE-2017-17592——Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
CVE-2017-17591——Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
CVE-2017-17590CRITICAL9.8FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
CVE-2017-17589CRITICAL9.8FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame...
CVE-2017-17588CRITICAL9.8FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par...
CVE-2017-17587CRITICAL9.8FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or c...
CVE-2017-17586CRITICAL9.8FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
CVE-2017-17585CRITICAL9.8FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
CVE-2017-17584CRITICAL9.8FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
CVE-2017-17583CRITICAL9.8FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
CVE-2017-17582CRITICAL9.8FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17581CRITICAL9.8FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
CVE-2017-17580CRITICAL9.8FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details....
CVE-2017-17579CRITICAL9.8FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
CVE-2017-17578CRITICAL9.8FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
CVE-2017-17577CRITICAL9.8FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param...
CVE-2017-17576CRITICAL9.8FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se...
CVE-2017-17575CRITICAL9.8FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
CVE-2017-17574CRITICAL9.8FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
CVE-2017-17573——FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p...
CVE-2017-17572CRITICAL9.8FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
CVE-2017-17571CRITICAL9.8FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
CVE-2017-17570CRITICAL9.8FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_o...
CVE-2017-17569——Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now