CVE-2017-17628

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-176299.8Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameCVE-2017-176309.8Yoga Class Script 1.0 has SQL Injection via the /list city parameter.CVE-2017-176319.8Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.CVE-2017-176329.8Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.CVE-2017-176339.8Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or eCVE-2017-176349.8Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.CVE-2017-176359.8MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.CVE-2017-176369.8MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.CVE-2017-176379.8Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.CVE-2017-176389.8Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.CVE-2017-176399.8Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.CVE-2017-17647.0IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to
CVE-2017-17628: Critical severity, CVSS 9.8 | Vulnix