CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-13

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Advance B2b Script (Advance B2b Script Project)

References

• https://packetstormsecurity.com/files/145299/Advance-B2B-Script-2.1.3-SQL-Injection.html
• https://www.exploit-db.com/exploits/43263/