Security Vulnerabilities - CVEs Published In October 2017
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.
CVSS Score
9.8
EPSS Score
0.011
Published
2017-10-31
Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.
CVSS Score
9.8
EPSS Score
0.011
Published
2017-10-31
MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
CPA Lead Reward Script allows SQL Injection via the username parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31
Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-10-31