CVE-2017-15579

CRITICAL · CVSS 9.8 EPSS 1.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-15579

Severity

CRITICAL

CVSS

9.8

EPSS

1.49%

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.