CVE-2017-20138: Itechscripts Auction Script

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.

Affected products

• Itechscripts Auction Script: version 6.49 only

Published 2022-07-16. Last modified 2026-06-17.