CVE-2017-17575

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Groupon Clone version 1.0 has a SQL Injection vulnerability via the id parameter in item_details.php and vendor_details.php files.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

Recommendation

It is recommended to update to the latest version of the software and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.