CVE Catalog
CVE-2017-17576
CriticalSummary
FS Gigs Script version 1.0 has a SQL Injection vulnerability via the cat parameter in browse-category.php, sc parameter in browse-scategory.php, or ser parameter in service-provider.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.
Recommendation
It is recommended to update the FS Gigs script to the latest version and implement input filtering and validation in the application.
Original NVD description (English source)
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.