critical9.8Public exploit code
CVE-2017-15980
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- US Zip Codes Database - 'state' SQL Injection2017-10-30 · webapps · php
Impact
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rowindex | Us Zip Codes Database Script | Version 1.0 |