4 matches found
CVE-2017-17635
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...
Sql injection
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...
PT-2017-14931
Name of the Vulnerable Software and Affected Versions MLM Forex Market Plan Script version 2.0.4 Description The issue concerns SQL Injection, which can be exploited via the newid parameter in the "news detail.php" endpoint or the eventid parameter in the "event detail.php" endpoint...
CVE-2017-17635: Improper Neutralization of Special Elements used in an SQL Command
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...