CVE-2017-15081

NONE EPSS 82.1%
Published Oct 24, 20178y ago · Modified Jun 17, 20262w ago
Find Similar
Published Oct 24, 2017 8y ago
Last Modified Jun 17, 2026 2w ago

Description

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.

Threat Intelligence

EPSS Exploit Probability
82.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

VendorProductVersionRange
phpsugarphp_melody2.6.1any

References 3

  • w00troot.blogspot.in http://w00troot.blogspot.in/2017/10/php-melody-2.html
    ExploitIssue TrackingThird Party Advisory
  • pastebin.com https://pastebin.com/7Xjm8Wqt
    ExploitIssue TrackingThird Party Advisory
  • exploit-db.com https://www.exploit-db.com/exploits/43062/
    ExploitIssue TrackingThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.