CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.25)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2017-17640
Critical

Advanced World Database version 2.0.5 has an SQL Injection vulnerability via the country or state parameter in city.php and the country parameter in state.php.

CVE-2017-17639
Critical

Muslim Matrimonial Script version 3.02 has an SQL Injection vulnerability via the succid parameter in the success-story.php file.

CVE-2017-17638
Critical

Groupon Clone Script version 3.01 has a SQL Injection vulnerability via the state_id parameter in the city_ajax.php file.

CVE-2017-17637
Critical

Car Rental Script version 2.0.4 has an SQL Injection vulnerability via the val parameter in the countrycode1.php file.

CVE-2017-17636
Critical

MLM Forced Matrix version 2.0.9 has a SQL Injection vulnerability via the newid parameter in the news-detail.php file.

CVE-2017-17635
Critical

MLM Forex Market Plan Script version 2.0.4 is vulnerable to SQL Injection via the newid parameter in news_detail.php and the eventid parameter in event_detail.php.

CVE-2017-17634
Critical

The Single Theater Booking Script version 3.2.1 has a SQL Injection vulnerability via the q parameter in the findcity.php file.

CVE-2017-17633
Critical

Multiplex Movie Theater Booking Script version 3.1.5 has an SQL Injection vulnerability via the moid parameter in trailer-detail.php, moid parameter in show-time.php, or eid parameter in event-detail.php.

CVE-2017-17632
Critical

The Responsive Events Movie Ticket Booking Script version 3.2.1 has an SQL Injection vulnerability via the q parameter in the findcity.php file.

CVE-2017-17631
Critical

Version 4.7.2 of Multireligion Responsive Matrimonial has an SQL Injection vulnerability via the succid parameter in the success-story.php file.

CVE-2017-17630
Critical

Yoga Class Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17629
Critical

Secure E-commerce Script version 2.0.1 is vulnerable to SQL Injection via the searchmain or searchcat parameters in category.php and the sid parameter in single_detail.php.

CVE-2017-17628
Critical

Responsive Realestate Script version 3.2 has a SQL Injection vulnerability via the tbud parameter in property-list.

CVE-2017-17627
Critical

Readymade Video Sharing Script version 3.2 has an SQL Injection vulnerability via the report_videos array parameter in single-video-detail.php.

CVE-2017-17626
Critical

Readymade PHP Classified Script version 3.3 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.

CVE-2017-17625
Critical

Professional Service Script version 1.0 has a SQL Injection vulnerability via the city parameter in the service list.

CVE-2017-17624
Critical

PHP Multivendor Ecommerce version 1.0 has an SQL Injection vulnerability via the sid parameter in single_detail.php and the searchcat or chid1 parameters in category.php.

CVE-2017-17623
Critical

Opensource Classified Ads Script version 3.2 has a SQL Injection vulnerability via the keyword parameter in advance_result.php.

CVE-2017-17622
Critical

The Online Exam Test Application Script version 1.6 has a SQL Injection vulnerability via the sort parameter in the exams.php file.

CVE-2017-17621
Critical

Multivendor Penny Auction Clone Script version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /detail URI.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS