CVE Catalog
CVE-2017-15968
CriticalSummary
MyBuilder Clone version 1.0 allows SQL Injection via the subcategory parameter in the phpsqlsearch_genxml.php file.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update to the latest version of the software and implement input data filtering to prevent SQL Injection attacks.
Original NVD description (English source)
MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.

