CVE-2017-17630

CVE-2017-17630 affects Yoga Class Script 1.0 (and PHP Scripts Mall Yoga Class Script 1.0) with an SQL injection vulnerability in the /list city parameter. The root cause is improper handling of the city parameter, allowing an attacker to inject SQL commands. CVSS data (NVD) indicates a high to cr...