CVE-2017-17928

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall Professional Service Script is vulnerable to SQL injection via the id parameter in admin/review.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.

It is recommended to update the script to the latest version and implement appropriate security measures such as input validation and sanitization.

Original NVD description (English source)

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.