CVE-2017-17895: SQL Injection
Published Dec 24, 2017
·Updated
Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI.
Affected Software
1 affected component
Basic Job Site Script Project Basic Job Site Script
Event History
Dec 24, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17895?
CVE-2017-17895 is classified as a critical vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2017-17895?
To fix CVE-2017-17895, validate and sanitize all user inputs, especially the location_name array parameter.
3
What systems are affected by CVE-2017-17895?
CVE-2017-17895 affects the Basic Job Site Script software.
4
What type of vulnerability is CVE-2017-17895?
CVE-2017-17895 is an SQL injection vulnerability that can allow unauthorized database access.
5
Can CVE-2017-17895 lead to data breaches?
Yes, if exploited, CVE-2017-17895 can lead to data breaches by allowing attackers to manipulate database queries.