CVE-2017-17928

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1590%

EPSS Percentile22.99th

Published2017年12月27日

Last Modified2026年5月13日

Vulnerability Description

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.

📦

Ordermanagementscript

All versions

Professional Service Script 1.0 has SQL Injection via the service-list city parameter.

PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in ...

Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly saniti...

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_...