CVE-2017-17902 SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.
CriticalCVSS 9.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kliqqi cms | = 3.5.2 | No fix listed |
References
- edricteo.com third-party-advisory