← back
CVE-2018-5973

CVE-2018-5973

EPSS 20.5%
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/43870/unverifiedexploitdbwww.exploit-db.com/exploits/43870unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.htmlhttps://www.exploit-db.com/exploits/43870/