CVE-2017-17927 - PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/

Back Back to CVE browser

MEDIUM

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/

Published Dec 26, 2017

5.3

MEDIUM

CVSS 3.0

EPSS 1.51%

Description

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 26, 2017

Updated Aug 5, 2024

Reserved Dec 26, 2017

Link CVE-2017-17927

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-17927

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-17927