EUVD-2017-7396

Malware in sbrugna...

CVE-2017-15980

The vulnerability CVE-2017-15980 affects the US Zip Codes Database Script 1.0, where the SQL injection occurs via the state parameter in index.php?action=lookup-county&state=... The connected documents provide concrete details: attacker-supplied state input can be exploited (e.g., UNION-based pay...

CVE-2017-15980: Improper Neutralization of Special Elements used in an SQL Command

US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter...

PT-2017-14335

Name of the Vulnerable Software and Affected Versions US Zip Codes Database Script version 1.0 Description The issue allows SQL Injection via the state parameter. Recommendations For version 1.0, avoid using the state parameter in the affected API endpoint until the issue is resolved. Restrict...