CVE-2017-17629

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Secure E-commerce Script 2.0.1 - 'searchcat' / 'searchmain' SQL Injection2017-12-11 · webapps · php · Verified

Impact

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html
• https://www.exploit-db.com/exploits/43287/
• https://packetstormsecurity.com/files/145327/Secure-E-commerce-Script-2.0.1-SQL-Injection.html
• https://www.exploit-db.com/exploits/43287/