CVE Catalog
CVE-2017-15963
CriticalSummary
iTech Gigs Script version 1.21 allows SQL Injection via the sc parameter in browse-scategory.php or the ser parameter in service-provider.php.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to validate and sanitize input data and to update the script to the latest version to minimize the risk of attack.
Original NVD description (English source)
iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.