CVE-2017-20140

CVE-2017-20140 affects Itech Movie Portal Script 7.36. The vulnerability is a reflected cross-site scripting issue in /movie.php triggered by manipulating the f parameter with input like . Exploitation is possible remotely, and public exploits have been disclosed. Root cause lies in unsanitized/u...

CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...

CVE-2017-20139

CVE-2017-20139 affects Itech Movie Portal Script 7.36. The vulnerability is a SQL injection in an unknown functionality of the file /show_news.php, triggered by manipulating the id parameter with a payload such as the one shown in the description. The payload demonstrates a complex UNION/EXFIL/CO...

CVE-2017-20139 Itech Movie Portal Script show_news.php Error sql injection

A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /shownews.php. The manipulation of the argument id with the input AND SELECT 1222 FROMSELECT COUNT,CONCAT0x71786b7a71,SELECT...

CVE-2017-20139 Itech Movie Portal Script show_news.php Error sql injection

A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /shownews.php. The manipulation of the argument id with the input AND SELECT 1222 FROMSELECT COUNT,CONCAT0x71786b7a71,SELECT...

Ambit Technologies Itech Movie Portal Script SQL Injection Vulnerability

Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from unknown code in movie.php, where manipulation of the parameter f can lead to SQL...

CVE-2017-20143: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection Error. The attack may be initiated remotely. The exploit has been...

PT-2022-8006

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A critical issue has been found in the software, affecting an unknown functionality of the file /show news.php. The manipulation of the id argument with a specific input leads to SQL injection...

PT-2022-8007

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A problematic issue was found in the software, affecting some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scriptin...

PT-2022-8009

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A critical issue was discovered, affecting the /artist-display.php file. The act argument is vulnerable to SQL injection Union attacks, which can be initiated remotely. Recommendations For Ite...

PT-2022-8008

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A critical issue has been found in the software, affecting the /movie.php file. The manipulation of the f argument leads to SQL injection Union, allowing for remote attacks. The exploit has be...

CVE-2017-20142: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection Union. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2017-20139: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /shownews.php. The manipulation of the argument id with the input AND SELECT 1222 FROMSELECT COUNT,CONCAT0x71786b7a71,SELECT...

PT-2022-8010

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A critical issue has been found in the processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection, which can result in an error. This issue can be...

Ambit Technologies Itech Movie Portal Script SQL Injection Vulnerability

Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from an unknown function in shownews.php, where manipulation of the parameter id can...

CVE-2017-20141: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of the file /movie.php. The manipulation of the argument f leads to sql injection Union. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

CVE-2017-20140: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...

CVE-2017-20138

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...

CVE-2017-20132

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

CVE-2017-20137

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql...