Approved changes feed: RSS · Atom

cpe:2.3:a:itech:auction_script:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItech (42a4f5bb-56ae-5ecf-8a74-1d1e5d3fb1b5)
ProductAuction Script (1eba1777-b5c8-5910-9968-a0a929158d77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20138 vulnerable 2026-06-08 05:09:23.340490 Itech Auction Script mcategory.php Blind sql injection
MEDIUM (6.3)
A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.
Published: 2022-07-16T06:16:11.000Z
Updated: 2025-04-15T14:05:01.100Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.