CVE Catalog
CVE-2017-17695
HighSummary
Techno Portfolio Management Panel through November 16, 2017 allows SQL Injection via the s parameter in panel/search.php.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update the software to the latest version and implement input data filtering to prevent SQL Injection attacks.
Other vulnerabilities in Techno - Portfolio Management Panel
Original NVD description (English source)
Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter.