PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
Food Order Script 1.0 has SQL Injection via the /list city parameter.
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.
Child Care Script 1.0 has SQL Injection via the /list city parameter.
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.