critical9.8Public exploit code
CVE-2017-17623
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Opensource Classified Ads Script 3.2 - SQL Injection2017-12-11 · webapps · php · Verified
Impact
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensource Classified Ads Script Project | Opensource Classified Ads Script | Version 3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html
- https://www.exploit-db.com/exploits/43292/
- https://packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html
- https://www.exploit-db.com/exploits/43292/