CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...