CVE Catalog

CVE-2017-15987

Critical
Published: Translated: NVD NIST

Summary

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and update the script to the latest version to minimize the risk of attack.

Original NVD description (English source)

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS