critical9.8Public exploit code
CVE-2017-17610
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- E-commerce MLM Software 1.0 - SQL Injection2017-12-08 · webapps · php
Impact
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.php newid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Commerce Mlm Software Project | E-Commerce Mlm Software | Version 1.0 |