CVE-2017-20131 Itech News Portal information.php sql injection
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itechscripts news portal script | = 6.28 | No fix listed |
| itech News Portal | = 6.28 | No fix listed |
References
- vuldb.com third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry