CVE-2017-17638

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Groupon Clone Script version 3.01 has a SQL Injection vulnerability via the state_id parameter in the city_ajax.php file.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to update the script to the latest version and implement input validation and sanitization.

Original NVD description (English source)

Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.