CVE-2017-14703

Critical

Published: 26/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.

Risk Assessment

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update the script to the latest version and implement security measures against SQL injection attacks.

Original NVD description (English source)

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.