CVE-2017-17618

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Kickstarter Clone Script 2.0 has a SQL Injection vulnerability via the projid parameter in the investcalc.php file.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to validate and sanitize input data in the projid parameter and to update the script to the latest version.

Original NVD description (English source)

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.