CVE-2017-17111

Critical

Published: 11/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Posty Readymade Classifieds Script version 1.0 allows an attacker to inject SQL commands via requests to listings.php?catid= or ads-details.php?ID=.

SQL injection can lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

It is recommended to update the script to the latest version and implement safeguards against SQL injection.

Original NVD description (English source)

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.