CVE-2017-20138 Itech Auction Script mcategory.php Blind sql injection
CriticalCVSS 9.8
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itechscripts auction script | = 6.49 | No fix listed |
| itech Auction Script | = 6.49 | No fix listed |
References
- vuldb.com third-party-advisory