CVE-2017-17612

The CVE-2017-17612 entry applies to Hot Scripts Clone 3.1 (from PHP Scripts Mall). A SQL injection vulnerability exists in the /categories endpoint via the subctid/mctid parameters, enabling manipulation of SQL commands by an attacker. Public references show explotation tooling linked to Exploit-...