CVE Catalog
CVE-2017-17892
CriticalSummary
Readymade Video Sharing Script is vulnerable to SQL Injection via the chnlid parameter in viewsubs.php or the search parameter in search_video.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or data manipulation.
Recommendation
It is recommended to validate and sanitize input data and to update the script to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.