PT-2017-14877 · Fs · Fs Grubhub Clone

Ihsan Sencan · Published 2017-12-13 · Updated 2020-09-29 · CVE-2017-17582

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0

Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint.

Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /food endpoint or sanitizing the keywords parameter to prevent SQL Injection attacks until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-17582

Affected Products

Fs Grubhub Clone

References · 4

• 🔥 https://packetstormsecurity.com/files/145314/FS-Grubhub-Clone-1.0-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/43252 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17582 · Security Note