CVE-2017-20142

MEDIUM

Itech Movie Portal Script artist-display.php Union sql injection

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-20142 has a selected CVSS score of 6.3 (medium); EIP currently links 1 catalogued exploit.

Description

A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection (Union). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 14, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Movie Portal Script

Browse Itech / Movie Portal Script
CVE List7.36affected

Proofs of concept

1

Catalogued exploits

ExploitDBMovie Portal Script 7.36 - Multiple VulnerabilitiesExploitDB exploitby Marc CastejonNot analyzed1 file

linked to 5 vulnerabilities

ExploitDB
PoC details

References

3