Skip to content

CVE-2017-20170 ollpu parontalli index.php sql injection

CriticalCVSS 9.8 EPSS 0.70%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to apply a patch to fix this issue. VDB-218418 is the identifier assigned to this vulnerability.

Affected products

ProductAffected versionsFixed in
parontalli project parontalli < 2017-01-21 2017-01-21
ollpu parontalli All versions No fix listed

References

  • github.com patch
  • vuldb.com permissions-required signature third-party-advisory vdb-entry
  • vuldb.com technical-description third-party-advisory vdb-entry