CVE-2017-20133: Improper Authentication

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

CVE-2017-20131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argument inf leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2017-20130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

PT-2022-8003

Name of the Vulnerable Software and Affected Versions Itech Classifieds Script version 7.27 Description A critical issue has been discovered, allowing for SQL injection through the manipulation of the scat argument in the /subpage.php file with a specific input. This can be exploited remotely. Th...

PT-2022-8005

Name of the Vulnerable Software and Affected Versions Itech Auction Script version 6.49 Description A critical issue has been identified, affecting the /mcategory.php file. The mcid argument is vulnerable to manipulation, allowing for SQL injection Blind attacks when input such as 4' AND 1734=173...

PT-2022-7999

Name of the Vulnerable Software and Affected Versions Itech Multi Vendor Script version 6.49 Description A critical issue affects the processing of the file /multi-vendor-shopping-script/product-list.php, where the manipulation of the pl argument leads to SQL injection. The attack can be initiate...

Itech News Portal SQL Injection Vulnerability

Itech News Portal is a news content management system. A security vulnerability exists in Itech News Portal version 6.28, which stems from unknown functionality in the insecure file /news-portal-script/information.php, which can be exploited by an attacker to remotely launch an attack...

Ambit Technologies iTech Freelancer Script SQL Injection Vulnerability

Ambit Technologies iTech Freelancer Script is a popular and cost-effective solution from Ambit Technologies India for launching your freelancer website. Ambit Technologies Itech Freelancer Script version 5.13 suffers from a security vulnerability that stems from the presence of unknown...

CVE-2017-20132: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

CVE-2017-20134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2022-7997

Name of the Vulnerable Software and Affected Versions Itech Real Estate Script version 3.12 Description A critical issue affects an unknown functionality of the file /real-estate-script/search property.php. The manipulation of the property for argument leads to SQL injection. The attack can be...

Ambit Technologies iTech B2B Script SQL Injection Vulnerability

Ambit Technologies iTech B2B Script is a B2B e-commerce system script from Ambit Technologies, India. Ambit Technologies iTech B2B Script version 4.28 suffers from a SQL injection vulnerability that stems from the presence of an insecure file, subpage.php, which can be exploited by an attacker to...

Sql injection

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

CVE-2017-12757: Improper Neutralization of Special Elements used in an SQL Command

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

iTech Travel Script v9.59 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTech Travel Script v9.59 - 'id' SQL Injection Date: 2017-12-07 Exploit Author: Dan° Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/travel-portal-script/ Version: v9.59 Tested on: Kali Linux 2.0...

iTech Gigs Script SQL Injection Vulnerability

iTech Gigs Script is an e-commerce website building system. The system features user registration, quotes and comments. A SQL injection vulnerability exists in iTech Gigs Script version 1.21. A remote attacker can inject SQL commands by sending the 'sc' parameter to the browse-scategory.php file ...

iTech Gigs Script 1.21 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTech Gigs Script 1.21 - SQL Injection Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category: Webapps Tested on:...

iTech Gigs Script 1.21 - SQL Injection

iTech Gigs Script 1.21 - SQL Injection Exploit Title: iTech Gigs Script 1.21 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category: Webapps Tested on:...

iTech Gigs Script 1.21 - SQL Injection

Exploit Title: iTech Gigs Script 1.21 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-1596...