CVE Catalog

CVE-2017-15977

Critical
Published: Translated: NVD NIST

Summary

Protected Links - Expiring Download Links version 1.0 allows SQL Injection via the username parameter.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and to validate and sanitize input data to prevent SQL Injection attacks.

Original NVD description (English source)

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS