critical9.8Public exploit code
CVE-2017-15960
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Article Directory Script 3.0 - 'id' SQL Injection2017-10-30 · webapps · php
Impact
Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yourarticlesdirectory | Article Directory Script | Version 3.0 |