CVE-2017-17630

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Yoga Class Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and to update the script to the latest version to mitigate the risk of SQL Injection.

Original NVD description (English source)

Yoga Class Script 1.0 has SQL Injection via the /list city parameter.