CVE-2017-15985

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-15985 affects the Basic B2B script, allowing SQL Injection via the pid or id parameters in the product_view1.php file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to validate and sanitize input data in the pid and id parameters to prevent SQL Injection attacks.

Original NVD description (English source)

Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.