CVE-2017-17602

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation in the application.

Original NVD description (English source)

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.