CVE-2017-17621

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Multivendor Penny Auction Clone Script version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /detail URI.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.