CVE-2017-15969

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PG All Share Video version 1.0 allows SQL Injection via manipulation of the PATH_INFO parameter in several endpoints, such as search/tag, friends/index, users/profile, and video_catalog/category.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of user data.

Recommendation

It is recommended to update to the latest version of the software and implement appropriate input filtering and validation to prevent SQL Injection attacks.

Original NVD description (English source)

PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category.