CVE-2017-17636

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MLM Forced Matrix version 2.0.9 has a SQL Injection vulnerability via the newid parameter in the news-detail.php file.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update to the latest version of the software and implement input data filtering to protect against SQL Injection attacks.

Original NVD description (English source)

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.