CVE-2017-15578

High

Published: 18/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In PHPSUGAR PHP Melody before version 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade to version 2.7.3 or later to mitigate this vulnerability.

Other vulnerabilities in PHPSUGAR PHP Melody

CVE-2017-15579Critical
In PHPSUGAR PHP Melody before version 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.

Original NVD description (English source)

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.