CVE Catalog

CVE-2017-17625

Critical
Published: Translated: NVD NIST

Summary

Professional Service Script version 1.0 has a SQL Injection vulnerability via the city parameter in the service list.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and to validate and sanitize input data to prevent SQL Injection attacks.

Original NVD description (English source)

Professional Service Script 1.0 has SQL Injection via the service-list city parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS