CVE-2017-20134 Itech Freelancer Script category.php sql injection
CriticalCVSS 9.8
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itechscripts freelancer script | = 5.13 | No fix listed |
| itech Freelancer Script | = 5.13 | No fix listed |
References
- vuldb.com permissions-required third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry