PT-2017-14882

CVE-2017-17587

·

Published

2017-12-13

·

Updated

2020-09-29

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FS Indiamart Clone version 1.0
Description The issue concerns SQL Injection, which can be exploited through specific parameters in various PHP files. The vulnerable parameters include the token parameter in 'catcompany.php', the id parameter in 'buyleads-details.php', and the c parameter in 'company/index.php'.
Recommendations For FS Indiamart Clone version 1.0, consider restricting access to the vulnerable parameters token, id, and c in the respective PHP files until a patch is available. Avoid using these parameters in the affected API endpoints or PHP files to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾