CVE-2017-17111

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Readymade Classifieds Script 1.0 - SQL Injection2017-12-05 · webapps · php · Verified

Impact

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html
• https://www.exploit-db.com/exploits/43212/
• http://packetstormsecurity.com/files/145237/Readymade-Classifieds-Script-1.0-SQL-Injection.html
• https://www.exploit-db.com/exploits/43212/