CVE Catalog

CVE-2017-15968

Critical
Published: Translated: NVD NIST

Summary

MyBuilder Clone version 1.0 allows SQL Injection via the subcategory parameter in the phpsqlsearch_genxml.php file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to update to the latest version of the software and implement input data filtering to prevent SQL Injection attacks.

Original NVD description (English source)

MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS