CVE-2017-17873

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vanguard Marketplace Digital Products PHP version 1.4 is vulnerable to SQL Injection via the PATH_INFO parameter in the /p URI.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update to the latest version of the software and implement input validation to prevent SQL Injection attacks.

Original NVD description (English source)

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.