EUVD-2017-11145

Malware in sbrugna...

CVE-2017-20138

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20138

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20138

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

Sql injection

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20138

CVE-2017-20138 pertains to Itech Auction Script 6.49. Multiple connected documents confirm a blind SQL injection in /mcategory.php via the mcid parameter (example input: 4' AND 1734=1734 AND 'Ggks'='Ggks), with remote exploitability. The issue affects the mcategory.php component and is identified...

CVE-2017-20138 Itech Auction Script mcategory.php Blind sql injection

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20138 Itech Auction Script mcategory.php Blind sql injection

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20138: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

Ambit Technologies iTech Auction Script SQL注入漏洞

Ambit Technologies iTech Auction Script is a popular and cost-effective solution from Ambit Technologies India for launching your auction website. Ambit Technologies iTech Auction Script version 6.49 suffers from a SQL injection vulnerability that stems from the presence of an insecure file...

PT-2022-8005

Name of the Vulnerable Software and Affected Versions Itech Auction Script version 6.49 Description A critical issue has been identified, affecting the /mcategory.php file. The mcid argument is vulnerable to manipulation, allowing for SQL injection Blind attacks when input such as 4' AND 1734=173...

Itech Auction Script 6.49 - pid SQL Injection

Itech Auction Script 6.49 - pid SQL Injection Exploit Title: Itech Auction Script v6.49 – 'pid' Parameter SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/auction-script/ Demo: http://auction.itechscripts.com/ Version:...

Itech Auction Script 6.49 - pid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Auction Script v6.49 – 'pid' Parameter SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/auction-script/ Demo: http://auction.itechscripts.com/...

Itech Auction Script 6.49 - 'pid' SQL Injection

Exploit Title: Itech Auction Script v6.49 – 'pid' Parameter SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/auction-script/ Demo: http://auction.itechscripts.com/ Version: 6.49 Tested on: Win7 x64, Kali Linux x64...

Itech Auction Script 6.49 - 'mcid' SQL Injection

Exploit Title: Itech Auction Script v6.49 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/auction-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overview...