US Zip Codes Database Script SQL Injection Vulnerability

US Zip Codes Database Script is a set of US Zip Codes Database Scripts. A SQL injection vulnerability exists in US Zip Codes Database Script version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands with the 'state' parameter...

CVE-2017-15980

US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter...

CVE-2017-15980: Improper Neutralization of Special Elements used in an SQL Command

US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter...

PT-2017-14335

Name of the Vulnerable Software and Affected Versions US Zip Codes Database Script version 1.0 Description The issue allows SQL Injection via the state parameter. Recommendations For version 1.0, avoid using the state parameter in the affected API endpoint until the issue is resolved. Restrict...