3 matches found
CVE-2017-17626
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter...
10AI score0.0305EPSS
SaveExploits2References2
CVE-2017-17626
The Readymade PHP Classified Script version 3.3 is vulnerable to SQL Injection through the /categories endpoint when the subctid or mctid parameters are provided. This is caused by unsanitized input in those parameters, enabling an attacker to inject SQL commands. There are public exploit referen...
9.8CVSS9.9AI score0.0305EPSS
SaveExploits2References2Affected Software1
20