high8.8Public exploit code
CVE-2017-15578
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Melody 2.7.3 - Multiple Vulnerabilities2017-10-09 · webapps · php
Impact
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpsugar | Php Melody | through 2.7.2 |