CVE Catalog

CVE-2017-17587

Critical
Published: Translated: NVD NIST

Summary

FS Indiamart Clone version 1.0 has a SQL Injection vulnerability via the token parameter in catcompany.php, the id parameter in buyleads-details.php, or the c parameter in company/index.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement input filtering and validation in the application.

Original NVD description (English source)

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS