CVE-2017-20134

The CVE-2017-20134 entry concerns Itech Freelancer Script version 5.13. The vulnerability is in an unknown function of /category.php where manipulating the sk parameter leads to SQL injection. It is described as remote in nature and has had public exploits disclosed. Connected documents corrobora...

CVE-2017-20134 Itech Freelancer Script category.php sql injection

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2017-20133 Itech Job Portal Script admin improper authentication

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

CVE-2017-20133

Affected product: Itech Job Portal Script 9.13. The CVE concerns an unspecified part of the /admin area where input handling leads to improper authentication. Descriptions across multiple sources indicate a critical vulnerability that can be triggered remotely, enabling an attacker to bypass auth...

CVE-2017-20132 Itech Multi Vendor Script product-list.php sql injection

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

CVE-2017-20132

CVE-2017-20132 affects Itech Multi Vendor Script 6.49. The vulnerability is a SQL injection in the file /multi-vendor-shopping-script/product-list.php triggered by manipulating the argument pl. Exploitation may be remote; public exploit/disclosures exist. Documented impacts indicate high confiden...

CVE-2017-20132 Itech Multi Vendor Script product-list.php sql injection

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

CVE-2017-20131 Itech News Portal information.php sql injection

A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2017-20130 Itech Real Estate Script search_property.php sql injection

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

CVE-2017-20130

CVE-2017-20130 affects Itech Real Estate Script 3.12. The vulnerability is an SQL injection in an unknown function of the file /real-estate-script/search_property.php, triggered by manipulating the property_for argument. The flaw can be exploited remotely and has been publicly disclosed; multiple...

CVE-2017-20129

creationtimestamp| type| source ---|---|--- 2022-07-14 12:27:19+00:00| seen| https://t.me/cibsecurity/46221...

CVE-2017-20129

A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...

CVE-2017-20129

CVE-2017-20129 concerns a SQL injection vulnerability in LogoStore’s /LogoStore/search.php. Multiple connected documents confirm the vulnerability arises from unsafely handling the query parameter, with an input like test' UNION ALL SELECT CONCAT(CONCAT('qqkkq','VnPVWVaYxljWqGpLLbEIyPIHBjjjjASQTn...

CVE-2017-20127

creationtimestamp| type| source ---|---|--- 2022-07-13 22:40:23+00:00| seen| https://t.me/cibsecurity/46197...

CVE-2017-20126

creationtimestamp| type| source ---|---|--- 2022-07-13 22:37:06+00:00| seen| https://t.me/cibsecurity/46182...

CVE-2017-20126

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20126

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20128

A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2017-20128 KB Messages PHP Script sql injection

A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2017-20128

KB Messages PHP Script 1.0 is affected by an unauthenticated SQL injection vulnerability. The issue arises from improper handling of the username/password inputs, where the payload 'or''=' enables injection. It is exploitable remotely and the exploit has been publicly disclosed, making active exp...