PT-2017-14868 · Fs · Fs Ebay Clone

Ihsan Sencan · Published 2017-12-13 · Updated 2017-12-20 · CVE-2017-17573

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0

Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id parameters.

Recommendations For FS Ebay Clone version 1.0, consider restricting access to the product.php and search.php endpoints until a fix is available. As a temporary workaround, avoid using the id, category id, and sub category id parameters in these endpoints to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-17573

Affected Products

Fs Ebay Clone

References · 4

• 🔥 https://packetstormsecurity.com/files/145319/FS-Ebay-Clone-1.0-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/43256 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17573 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17573 · Security Note