critical9.8Public exploit code
CVE-2017-15961
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iProject Management System 1.0 - 'ID' SQL Injection2017-10-30 · webapps · php
Impact
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iproject Management System Project | Iproject Management System | Version 1.0 |