CVE-2017-17610

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the software to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.