CVE-2017-17570

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Expedia Clone version 1.0 has a SQL Injection vulnerability via the id parameter in pages.php or content.php, or the fl_orig or fl_dest parameter in show-flight-result.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.