critical9.8Public exploit code
CVE-2017-15958
D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Park Pro 1.0 - SQL Injection2017-10-30 · webapps · php
Impact
D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Domainzaar | D-Park Pro | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43101/
- https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43101/