Unknown · Sourcebans++ · CVE-2017-7891
**Name of the Vulnerable Software and Affected Versions**
SourceBans++ version 1.5.4.7
**Description**
The issue concerns a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this issue was exploited are not provided. Technical details about exploitation include the `/admin.comms.php` endpoint and the `rebanid` parameter.
**Recommendations**
For SourceBans++ version 1.5.4.7, avoid using the `rebanid` parameter in the `/admin.comms.php` endpoint until the issue is resolved.