CVE-2017-15958

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

D-Park Pro Domain Parking Script version 1.0 is vulnerable to SQL Injection via the 'username' field in the admin/loginform.php login form.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to database information, posing a serious security risk to the organization.

Recommendation

It is recommended to update the D-Park Pro Domain Parking script to the latest version and implement appropriate protections against SQL Injection attacks.

Original NVD description (English source)

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.