CVE Catalog

CVE-2017-15960

Critical
Published: Translated: NVD NIST

Summary

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and update the script to the latest version to minimize the risk of attack.

Original NVD description (English source)

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS