CVE-2017-20126

🗓️ 13 Jul 2022 17:55:13Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 45 Views🌐 WEB

Vulnerability in KB Affiliate Referral Script 1.0 allowing remote SQL injection

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2017-20126	13 Jul 202222:37	–	circl
CNNVD	KB Affiliate Referral Script SQL注入漏洞	13 Jul 202200:00	–	cnnvd
Cvelist	CVE-2017-20126 KB Affiliate Referral Script index.php sql injection	13 Jul 202217:55	–	cvelist
EUVD	EUVD-2017-11133	7 Oct 202500:30	–	euvd
NVD	CVE-2017-20126	13 Jul 202218:15	–	nvd
Prion	Sql injection	13 Jul 202218:15	–	prion
RedhatCVE	CVE-2017-20126	5 Feb 202518:16	–	redhatcve
Vulnrichment	CVE-2017-20126 KB Affiliate Referral Script index.php sql injection	13 Jul 202217:55	–	vulnrichment

NVD

Vulners

Node

kb_affiliate_referral_script_project kb_affiliate_referral_scriptMatch1.0

[
  {
    "product": "KB Affiliate Referral Script",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
exploit-db	www.exploit-db.com/exploits/41166/

Parameter	Position	Path	Description	CWE
username	request body	/index.php	SQL injection via username/password on /index.php (input 'or''=' leading to insecure SQL construction).	CWE-89
password	request body	/index.php	SQL injection via username/password on /index.php (input 'or''=' leading to insecure SQL construction).	CWE-89

21 Nov 2024 03:22Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.3 - 9.8

EPSS0.00207

SSVC

CWE-89