126 matches found
CVE-2017-20143
CVE-2017-20143 affects Itech Movie Portal Script 7.36. The vulnerability arises from SQL injection in the /film-rating.php handler, triggered by manipulating the v parameter. The issue is exploitable remotely, and public exploits have been disclosed. The connected documents do not provide concret...
CVE-2017-20143 Itech Movie Portal Script film-rating.php Error sql injection
A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection Error. The attack may be initiated remotely. The exploit has been...
CVE-2017-20142 Itech Movie Portal Script artist-display.php Union sql injection
A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection Union. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2017-20142 Itech Movie Portal Script artist-display.php Union sql injection
A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection Union. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2017-20142
CVE-2017-20142 affects Itech Movie Portal Script 7.36, with a vulnerability in /artist-display.php where manipulation of the act parameter enables a SQL injection (Union). This is a remote, unauthenticated issue reported as critical; multiple sources state the exploit has been disclosed publicly....
CVE-2017-20141
The CVE-2017-20141 vulnerability affects Itech Movie Portal Script 7.36, with the /movie.php file vulnerable via the f parameter to a SQL injection (Union) allowing remote exploitation. Multiple connected documents confirm the issue and its exploitation is public. The exact impact details (beyond...
CVE-2017-20141 Itech Movie Portal Script movie.php Union sql injection
A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of the file /movie.php. The manipulation of the argument f leads to sql injection Union. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
CVE-2017-20141 Itech Movie Portal Script movie.php Union sql injection
A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of the file /movie.php. The manipulation of the argument f leads to sql injection Union. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
CVE-2017-20140
CVE-2017-20140 affects Itech Movie Portal Script 7.36. The vulnerability is a reflected cross-site scripting issue in /movie.php triggered by manipulating the f parameter with input like . Exploitation is possible remotely, and public exploits have been disclosed. Root cause lies in unsanitized/u...
CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting
A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...
CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting
A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...
CVE-2017-20139
CVE-2017-20139 affects Itech Movie Portal Script 7.36. The vulnerability is a SQL injection in an unknown functionality of the file /show_news.php, triggered by manipulating the id parameter with a payload such as the one shown in the description. The payload demonstrates a complex UNION/EXFIL/CO...
CVE-2017-20139 Itech Movie Portal Script show_news.php Error sql injection
A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /shownews.php. The manipulation of the argument id with the input AND SELECT 1222 FROMSELECT COUNT,CONCAT0x71786b7a71,SELECT...
Ambit Technologies Itech Movie Portal Script SQL注入漏洞
Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from unknown code in movie.php, where manipulation of the parameter f can lead to SQL...
Ambit Technologies Itech Movie Portal Script SQL注入漏洞
Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. Ambit Technologies Itech Movie Portal Script version 7.36 suffers from a SQL injection vulnerability that stems from unknown code in artist-display.php, where manipulation of the parameter act can...
Ambit Technologies Itech Movie Portal Script SQL注入漏洞
Ambit Technologies Itech Movie Portal Script is a movie portal script from Ambit Technologies, Inc. Ambit Technologies Itech Movie Portal Script 7.36 suffers from a SQL injection vulnerability that stems from some unknown handling of film-rating.php, where manipulation of the parameter v can lead...
CVE-2017-20133
A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...
Authentication flaw
A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...
Sql injection
A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2017-20133
Affected product: Itech Job Portal Script 9.13. The CVE concerns an unspecified part of the /admin area where input handling leads to improper authentication. Descriptions across multiple sources indicate a critical vulnerability that can be triggered remotely, enabling an attacker to bypass auth...