critical9.8Public exploit code
CVE-2018-5973
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or Cate…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Professional Local Directory Script 1.0 - SQL Injection2018-01-24 · webapps · php
Impact
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eihitech | Professional Local Directory Script | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43870/
- http://packetstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43870/