critical9.8Public exploit code
CVE-2017-15975
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vastal I-Tech Dating Zone 0.9.9 - 'product_id' SQL Injection2017-10-30 · webapps · php
Impact
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vastal | Dating Zone | Version 0.9.9 |