critical9.8Public exploit code
CVE-2017-15081
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Melody 2.6.1 - SQL Injection2017-10-28 · webapps · php
Impact
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpsugar | Php Melody | Version 2.6.1 |