CVE-2017-17713
CriticalSummary
Trape before 2017-11-05 has SQL injection vulnerability via various parameters, including /nr red, /nr vId, and many registration-related parameters.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.
Recommendation
It is recommended to update Trape to a version after 2017-11-05 and review and secure all entry points that may be susceptible to SQL injection.
Original NVD description (English source)
Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.