CVE-2017-17598

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.