CVE-2017-15992

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to validate and sanitize input data and to update the script to the latest version to minimize the risk of attack.