critical9.8Public exploit code
CVE-2017-15987
Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fake Magazine Cover Script - SQL Injection2017-10-30 · webapps · php
Impact
Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fake Magazine Cover Script Project | Fake Magazine Cover Script | All versions |