CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image Sharing Script 4.13i and Tech Job Script 9.27i and Tech Movie Script 7.51i and Tech Multi Vendor Script 6.63i and Tech Social Networking Script 3.08i and Tech Travel Script 9.49. The impact is: Code execution (remote).
References
Link Resource
http://ambit.com Not Applicable
http://itech.com Product
https://www.exploit-db.com/exploits/42507 Exploit Third Party Advisory VDB Entry
http://ambit.com Not Applicable
http://itech.com Product
https://www.exploit-db.com/exploits/42507 Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ambittechnologies:itech_b2b_script:4.42i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_business_networking_script:8.26i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_caregiver_script:2.71i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_classifieds_script:7.41i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_dating_script:3.40i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_freelancer_script:5.27i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_image_sharing_script:4.13i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_job_script:9.27i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_movie_script:7.51i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_multi_vendor_script:6.63i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_social_networking_script:3.08i:*:*:*:*:*:*:*
cpe:2.3:a:ambittechnologies:itech_travel_script:9.49:*:*:*:*:*:*:*

History

21 Nov 2024, 03:10

Type Values Removed Values Added
References () http://ambit.com - Not Applicable () http://ambit.com - Not Applicable
References () http://itech.com - Product () http://itech.com - Product
References () https://www.exploit-db.com/exploits/42507 - Exploit, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/42507 - Exploit, Third Party Advisory, VDB Entry

Information

Published : 2019-05-09 18:29

Updated : 2024-11-21 03:10


NVD link : CVE-2017-12757

Mitre link : CVE-2017-12757

CVE.ORG link : CVE-2017-12757


JSON object : View

Products Affected

ambittechnologies

  • itech_classifieds_script
  • itech_dating_script
  • itech_caregiver_script
  • itech_freelancer_script
  • itech_movie_script
  • itech_image_sharing_script
  • itech_b2b_script
  • itech_social_networking_script
  • itech_travel_script
  • itech_job_script
  • itech_business_networking_script
  • itech_multi_vendor_script
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')