CVE-2017-12757 — CRITICAL (9.8)

Vulnerability Description

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image Sharing Script 4.13i and Tech Job Script 9.27i and Tech Movie Script 7.51i and Tech Multi Vendor Script 6.63i and Tech Social Networking Script 3.08i and Tech Travel Script 9.49. The impact is: Code execution (remote).

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ambittechnologies	Itech B2B Script	4.42i
Ambittechnologies	Itech Business Networking Script	8.26i
Ambittechnologies	Itech Caregiver Script	2.71i
Ambittechnologies	Itech Classifieds Script	7.41i
Ambittechnologies	Itech Dating Script	3.40i
Ambittechnologies	Itech Freelancer Script	5.27i
Ambittechnologies	Itech Image Sharing Script	4.13i
Ambittechnologies	Itech Job Script	9.27i
Ambittechnologies	Itech Movie Script	7.51i
Ambittechnologies	Itech Multi Vendor Script	6.63i
Ambittechnologies	Itech Social Networking Script	3.08i
Ambittechnologies	Itech Travel Script	9.49

Related Weaknesses (CWE)

CWE-89

References

http://ambit.comNot Applicable
http://itech.comProduct
https://www.exploit-db.com/exploits/42507ExploitThird Party AdvisoryVDB Entry
http://ambit.comNot Applicable
http://itech.comProduct
https://www.exploit-db.com/exploits/42507ExploitThird Party AdvisoryVDB Entry

FAQ

What is CVE-2017-12757?

CVE-2017-12757 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Clas...

How severe is CVE-2017-12757?

CVE-2017-12757 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-12757?

Check the references section above for vendor advisories and patch information. Affected products include: Ambittechnologies Itech B2B Script, Ambittechnologies Itech Business Networking Script, Ambittechnologies Itech Caregiver Script, Ambittechnologies Itech Classifieds Script, Ambittechnologies Itech Dating Script.