CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

Sql injection

SQL injection vulnerability in newsdetail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...