Skip to content
CVE Tracker
Back

CVE-2017-20195

LUNAD3v AreaLoad request.php sql injection

Medium5.1EPSS 0.30%
Published
Updated
Reserved
Assigned by
VulDB

Description

A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 264813c546dba03989ac0fc365f2022bf65e3be2. It is recommended to apply a patch to fix this issue.

Scores

CVSS scores of CVE-2017-20195, by who scored it
Scored byCVSSScoreVector
VulDBCNA (assigner)4.0Medium5.1CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
VulDBCNA (assigner)3.1Medium5.5CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
VulDBCNA (assigner)3.0Medium5.5CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
VulDBCNA (assigner)2.0Medium5.2AV:A/AC:L/Au:S/C:P/I:P/A:P
NVDNVD · Deferred4.0Medium5.1CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
0.30% · top 77% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.1.

Weakness

Affected products

  • LUNAD3v · AreaLoad

    • affected 1a1103182ed63a06dde63d1712f3262eda19c3ec

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .