CVE-2017-17626

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Readymade PHP Classified Script version 3.3 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input data filtering and validation.

Original NVD description (English source)

Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.