3 matches found
CVE-2017-17629
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
10AI score0.02204EPSS
SaveExploits2References2
CVE-2017-17629: Improper Neutralization of Special Elements used in an SQL Command
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
9.8CVSS8.1AI score0.02204EPSS
SaveExploits2References2
PT-2017-14925
Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...
9.8CVSS0.02204EPSS
SaveExploits2References4
20