CVE-2017-17607

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update CMS Auditor Website to the latest version and implement input data filtering.

Original NVD description (English source)

CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.