CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.24)
Freelance Website Script version 2.0.6 has a SQL Injection vulnerability via the pr_id parameter in jobdetails.php or the catid parameter in searchbycat_list.php.
Hot Scripts Clone version 3.1 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Doctor Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.
Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Child Care Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.
Co-work Space Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Consumer Complaints Clone Script 1.0 has a SQL Injection vulnerability via the id parameter in the other-user-profile.php file.
Entrepreneur Bus Booking Script version 3.0.4 has an SQL Injection vulnerability via the sourcebus parameter in the booker_details.php file.
The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.
Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.
Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.
Basic B2B Script version 2.0.8 has a SQL Injection vulnerability via the id parameter in the product_details.php file.
Advance Online Learning Management Script version 3.1 has a SQL Injection vulnerability via the subcatid or popcourseid parameter in courselist.php.
Affiliate MLM Script version 1.0 has a SQL Injection vulnerability via the key parameter in product-category.php.
Nearbuy Clone Script version 3.2 has a SQL Injection vulnerability via the category_list.php search parameter.
Entrepreneur Job Portal Script version 2.0.6 has an SQL Injection vulnerability via the rid1 parameter in the jobsearch_all.php file.
Beauty Parlour Booking Script version 1.0 has an SQL Injection vulnerability via the /list gender or city parameter.
DomainSale PHP Script version 1.0 has a SQL Injection vulnerability via the id parameter in domain.php.

