PT-2017-14868 · Fs · Fs Ebay Clone

Ihsan Sencan · Publicado 2017-12-13 · Atualizado 2017-12-20 · CVE-2017-17573

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0

Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id parameters.

Recommendations For FS Ebay Clone version 1.0, consider restricting access to the product.php and search.php endpoints until a fix is available. As a temporary workaround, avoid using the id, category id, and sub category id parameters in these endpoints to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-17573

Produtos afetados

Fs Ebay Clone

Referências · 4

• 🔥 https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/43256 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17573 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17573 · Nota de Segurança