CVE-2017-15976

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ZeeBuddy 2x allows SQL Injection via the groupid parameter in admin/editadgroup.php, which is a different vulnerability than CVE-2008-3604.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to update the software to the latest version and implement input validation to prevent SQL Injection attacks.

Original NVD description (English source)

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.