Approved changes feed: RSS · Atom

cpe:2.3:a:itechscripts:auction_script:6.49:*:*:*:*:*:*:*

part: a version: 6.49 update: *

VendorItechscripts (6fc7c215-774e-59c5-98ec-bf882413f47f)
ProductAuction Script (f6aa0889-b405-5b4c-ae4b-98e5c5d371a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20138 vulnerable 2026-06-03 14:37:06.369077 Itech Auction Script mcategory.php Blind sql injection
MEDIUM (6.3)
A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.
Published: 2022-07-16T06:16:11.000Z
Updated: 2025-04-15T14:05:01.100Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.