CVE-2017-17629

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Secure E-commerce Script version 2.0.1 is vulnerable to SQL Injection via the searchmain or searchcat parameters in category.php and the sid parameter in single_detail.php.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation to mitigate the risk of SQL Injection attacks.

Original NVD description (English source)

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.