CVE Catalog

CVE-2017-17594

Critical
Published: Translated: NVD NIST

Summary

DomainSale PHP Script version 1.0 has a SQL Injection vulnerability via the id parameter in domain.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to update the script to the latest version and implement input validation to protect against SQL Injection attacks.

Original NVD description (English source)

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS