CVE-2017-15579

🗓️ 18 Oct 2017 02:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

PHPSUGAR PHP Melody before 2.7.3, SQL Injection via aa_pages_per_page cooki

Reporter	Title	Published	Views	Family All 7
CNVD	PHPSUGAR PHP Melody SQL Injection Vulnerability (CNVD-2017-32540)	27 Oct 201700:00	–	cnvd
Cvelist	CVE-2017-15579	18 Oct 201702:00	–	cvelist
Exploit DB	PHP Melody 2.7.3 - Multiple Vulnerabilities	9 Oct 201700:00	–	exploitdb
EUVD	EUVD-2017-7031	7 Oct 202500:30	–	euvd
exploitpack	PHP Melody 2.7.3 - Multiple Vulnerabilities	9 Oct 201700:00	–	exploitpack
NVD	CVE-2017-15579	18 Oct 201702:29	–	nvd
Prion	Sql injection	18 Oct 201702:29	–	prion

NVD

Node

phpsugar php_melodyRange≤2.7.2

Source	Link
blogs	www.blogs.securiteam.com/index.php/archives/3464
phpsugar	www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/

Parameter	Position	Path	Description	CWE
page_title	request body	page_manager.php	Stored XSS via page_title in page_manager.php leading to admin page script execution	CWE-89
image	request body	phpmelody/admin/edit_category.php	SQL Injection via the image parameter in POST to edit_category.php	CWE-89

13 May 2026 00:24Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 39.8

EPSS0.00376

cve-2017-15579 phpsugar php melody sql injection nvd