PT-2017-14877 · Fs · Fs Grubhub Clone

Ihsan Sencan · Publicado 2017-12-13 · Atualizado 2020-09-29 · CVE-2017-17582

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0

Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint.

Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /food endpoint or sanitizing the keywords parameter to prevent SQL Injection attacks until a patch is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-17582

Produtos afetados

Fs Grubhub Clone

Referências · 4

• 🔥 https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/43252 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17582 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17582 · Nota de Segurança