CVE Catalog

CVE-2017-17578

Critical
Published: Translated: NVD NIST

Summary

FS Crowdfunding Script version 1.0 has a SQL Injection vulnerability via the id parameter in the latest_news_details.php file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update the script to the latest version and implement appropriate protections against SQL Injection attacks.

Original NVD description (English source)

FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS