FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.
References
Link | Resource |
---|---|
https://packetstormsecurity.com/files/145307/FS-Linkedin-Clone-1.0-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
https://www.exploit-db.com/exploits/43249/ | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-12-13 01:29
Updated : 2020-09-29 10:09
NVD link : CVE-2017-17580
Mitre link : CVE-2017-17580
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
linkedin_clone_project
- linkedin_clone