CVE-2017-17616

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Event Search Script 1.0 has a SQL Injection vulnerability via the city parameter in the /event-list path.

Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to validate and sanitize input data and update the script to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.