CVE-2017-15961

CVE-2017-15961 affects iProject Management System 1.0. The vulnerability is an SQL injection via the ID parameter to index.php, enabling arbitrary SQL execution. Public references (CNVD-2017-36116, Exploit-DB) describe remote exploitation through crafted ID values (e.g., ?ID=[SQL]), with PoCs and...