Vulnerability Details CVE-2017-17599
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html
- https://www.exploit-db.com/exploits/43264/
- https://packetstormsecurity.com/files/145300/Advance-Online-Learning-Management-Script-3.1-SQL-Injection.html
- https://www.exploit-db.com/exploits/43264/
Products affected by CVE-2017-17599
-
Advance Online Learning Management Script Project » Advance Online Learning Management Script » Version: 3.1cpe:2.3:a:advance_online_learning_management_script_project:advance_online_learning_management_script:3.1