Skip to content

CVE-2017-15992 Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

CriticalCVSS 9.8 EPSS 2.7% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

Affected products

ProductAffected versionsFixed in
website broker script project website broker script All versions No fix listed

References

  • 43067 exploit third-party-advisory vdb-entry