CVE-2017-20126

KB Affiliate Referral Script 1.0 contains a SQL injection in /index.php triggered by manipulating the username/password fields with the payload 'or''='; exploitation is remote and the public exploit is available. This CVE (CVE-2017-20126) affects the script and has been discussed across multiple ...