CVE-2017-17591

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-175929.8Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.CVE-2017-175937.5Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.CVE-2017-175949.8DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.CVE-2017-175959.8Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.CVE-2017-175969.8Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.CVE-2017-175979.8Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.CVE-2017-175989.8Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.CVE-2017-175999.8Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.CVE-2017-17607.1IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. ICVE-2017-176009.8Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.CVE-2017-176019.8Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.CVE-2017-176029.8Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVE-2017-17591: Critical severity, CVSS 9.8 | Vulnix