CVE-2017-17589

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

FS Thumbtack Clone version 1.0 has a SQL Injection vulnerability via the cat parameter in browse-category.php and the sc parameter in browse-scategory.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and to validate and sanitize input data in the application.

Original NVD description (English source)

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.