NetSight
critical9.8Public exploit code

CVE-2017-15992

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

Affected products

VendorProductAffected versions
Website Broker Script ProjectWebsite Broker Script
All versions

Weakness classification

References