CVE-2017-17928: Ordermanagementscript Professional Service Script

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.

Affected products

• Ordermanagementscript Professional Service Script: affected versions not specified

Published 2017-12-27. Last modified 2026-06-17.