CVE-2017-20138

CVE-2017-20138 pertains to Itech Auction Script 6.49. Multiple connected documents confirm a blind SQL injection in /mcategory.php via the mcid parameter (example input: 4' AND 1734=1734 AND 'Ggks'='Ggks), with remote exploitability. The issue affects the mcategory.php component and is identified...