CVE-2017-15961

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to validate and sanitize input data and to update the system to the latest version to minimize the risk of attack.

Original NVD description (English source)

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.