CVE-2017-15982

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Dynamic News Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update the CMS to the latest version and implement input data filtering to prevent SQL Injection attacks.

Original NVD description (English source)

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.