CVE-2017-15959

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Adult Script Pro version 2.2.4 allows SQL Injection via the PATH_INFO parameter to a /download URI, which is a different vulnerability than CVE-2007-6576.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement safeguards against SQL Injection attacks.

Original NVD description (English source)

Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-2007-6576.