critical9.8Public exploit code
CVE-2017-17594
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DomainSale PHP Script 1.0 - 'id' SQL Injection2017-12-08 · webapps · php · Verified
Impact
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Domainsale Php Script Project | Domainsale Php Script | Version 1.0 |