Skip to content
OpenAdvisories
Medium · 6.3 CVE-2017-20138 EUVD-2017-11145GHSA-pv83-6m4h-4cv8

Itech Auction Script mcategory.php Blind sql injection

Published Jul 16, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.

Affected products

VendorProductAffectedFixed
Itech Auction Script 6.49 —

References