fortunescripts vulnerabilities

Products

• lynda clone 2
• ebay clone 1

Latest fortunescripts CVEs

Newest publication first

1. CVE-2017-17904 FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.

   Published 2017-12-25

   Medium·CVSS 5.4 EPSS 0.49%

   FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.

2. CVE-2017-17903 FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

   Published 2017-12-25

   High·CVSS 8.8 EPSS 0.46%

   FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

3. CVE-2017-17573 FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

   Published 2017-12-13

   Critical·CVSS 9.8 EPSS 3.1%

   FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.