CVE-2017-17573

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Ebay Clone version 1.0 has an SQL Injection vulnerability via the id parameter in product.php or the category_id or sub_category_id parameters in search.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to validate and sanitize input data and to update to the latest version of the software to minimize the risk of attack.

Original NVD description (English source)

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.