CVE Catalog
CVE-2017-15986
CriticalSummary
CPA Lead Reward Script allows SQL Injection via the username parameter.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to validate and sanitize input data and to update the script to the latest version to minimize the risk of attack.
Original NVD description (English source)
CPA Lead Reward Script allows SQL Injection via the username parameter.