CVE Catalog
CVE-2017-15980
CriticalSummary
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the confidentiality of the organization's data.
Recommendation
It is recommended to update the script to the latest version and implement input validation to prevent SQL Injection attacks.
Original NVD description (English source)
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.