CVE-2017-17577

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Trademe Clone version 1.0 has a SQL Injection vulnerability via the search parameter in search_item.php or the id parameter in general_item_details.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to validate and sanitize input data and to update the application to the latest version to mitigate the risk of attack.

Original NVD description (English source)

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.