CVE-2017-20132

CVE-2017-20132 affects Itech Multi Vendor Script 6.49. The vulnerability is a SQL injection in the file /multi-vendor-shopping-script/product-list.php triggered by manipulating the argument pl. Exploitation may be remote; public exploit/disclosures exist. Documented impacts indicate high confiden...