CVE-2017-17599

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Advance Online Learning Management Script version 3.1 has a SQL Injection vulnerability via the subcatid or popcourseid parameter in courselist.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing user data confidentiality and system integrity.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.