CVE-2017-17635

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MLM Forex Market Plan Script version 2.0.4 is vulnerable to SQL Injection via the newid parameter in news_detail.php and the eventid parameter in event_detail.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.