critical9.8Public exploit code
CVE-2017-17613
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Freelance Website Script 2.0.6 - 'pr_id' / 'catid' SQL Injection2017-12-11 · webapps · php · Verified
Impact
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freelance Website Script Project | Freelance Website Script | Version 2.0.6 |