CVE-2017-17580

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Linkedin Clone version 1.0 has a SQL Injection vulnerability via the grid parameter in group.php, fid parameter in profile.php, or id parameter in company_details.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement input validation and sanitization in the application.

Original NVD description (English source)

FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.