CVE-2017-17589

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-175909.8FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.CVE-2017-175919.8Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.CVE-2017-175929.8Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.CVE-2017-175937.5Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.CVE-2017-175949.8DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.CVE-2017-175959.8Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.CVE-2017-175969.8Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.CVE-2017-175979.8Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.CVE-2017-175989.8Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.CVE-2017-175999.8Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.CVE-2017-17607.1IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. ICVE-2017-176009.8Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
CVE-2017-17589: Critical severity, CVSS 9.8 | Vulnix