CVE-2017-17598

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Affiliate MLM Script version 1.0 has a SQL Injection vulnerability via the key parameter in product-category.php.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update the script to the latest version and implement input data filtering to minimize the risk of SQL Injection.

Original NVD description (English source)

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.