CVE-2017-17567

High

Published: 13/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Scubez Posty Readymade Classifieds has a SQL Injection vulnerability via the ID parameter in the admin/user_activate_submit.php file.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and to update the application to the latest version to mitigate the risk.

Other vulnerabilities in Scubez Posty Readymade Classifieds

CVE-2017-17568High
Scubez Posty Readymade Classifieds has incorrect access control for the admin/user_activate_submit.php script, which may allow remote attackers to obtain sensitive information via a direct request.

Original NVD description (English source)

Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS