critical9.8Public exploit code
CVE-2017-15986
CPA Lead Reward Script allows SQL Injection via the username parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CPA Lead Reward Script - SQL Injection2017-10-30 · webapps · php
Impact
CPA Lead Reward Script allows SQL Injection via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpa Lead Reward Script Project | Cpa Lead Reward Script | All versions |