CVE Catalog
CVE-2017-17592
CriticalSummary
Version 2.0.5 of Auction Marketplace is vulnerable to SQL Injection via the cat_id parameter in search.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.
Recommendation
It is recommended to update to the latest version of the software and implement input filtering and validation to mitigate the risk of attack.
Original NVD description (English source)
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.