PT-2017-14889 · Domainsale · Domainsale Php Script

Ihsan Sencan · Publicado 2017-12-13 · Atualizado 2017-12-22 · CVE-2017-17594

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DomainSale PHP Script version 1.0

Description The issue is related to SQL Injection, which occurs via the id parameter in the "domain.php" endpoint.

Recommendations For DomainSale PHP Script version 1.0, avoid using the id parameter in the domain.php endpoint until the issue is resolved. Consider validating and sanitizing user input to prevent SQL Injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-17594

Produtos afetados

Domainsale Php Script

Referências · 4

• 🔥 https://exploit-db.com/exploits/43235 · Exploit
• 🔥 https://packetstormsecurity.com/files/145246/DomainSale-PHP-Script-1.0-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-17594 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17594 · Nota de Segurança