CVE-2017-20135CWE-89
Itech Dating Script see_more_details.php sql injection
Medium · published July 16, 2022
What it is
A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /see_more_details.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00988 · 61.9th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2022-07-16T06:15Z
EPSS history
Timeline