CVE-2017-17625

CVE-2017-17625 concerns PHP Scripts Mall Professional Service Script 1.0, where the SQL injection vulnerability exists in the service-list endpoint via the city parameter. The root cause is an injectable SQL query exposed by the city input, enabling an attacker to manipulate the database. Public ...