CVE-2017-17111

Name of the Vulnerable Software and Affected Versions Posty Readymade Classifieds Script version 1.0

Description The issue allows an attacker to inject SQL commands via specific requests, such as "listings.php?catid=" or "ads-details.php?ID=". This could potentially lead to unauthorized access or manipulation of data.

Recommendations For Posty Readymade Classifieds Script version 1.0, consider restricting access to the "listings.php" and "ads-details.php" endpoints until a patch is available. As a temporary workaround, avoid using the catid and ID parameters in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.