CVE-2017-15983

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MyMagazine Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the CMS to the latest version and implement input validation to prevent SQL Injection attacks.

Original NVD description (English source)

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.