Certain Ambit Technologies Pvt.
Priority MEDIUM 48CWE-89Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-89.
Summary
Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image Sharing Script 4.13i and Tech Job Script 9.27i and Tech Movie Script 7.51i and Tech Multi Vendor Script 6.63i and Tech Social Networking Script 3.08i and Tech Travel Script 9.49. The impact is: Code execution (remote).
Why it matters now
EPSS 0.0361 89th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ambittechnologies:itech_b2b_script:4.42i:*:*:*:*:*:*:* | 4.42i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_business_networking_script:8.26i:*:*:*:*:*:*:* | 8.26i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_caregiver_script:2.71i:*:*:*:*:*:*:* | 2.71i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_classifieds_script:7.41i:*:*:*:*:*:*:* | 7.41i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_dating_script:3.40i:*:*:*:*:*:*:* | 3.40i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_freelancer_script:5.27i:*:*:*:*:*:*:* | 5.27i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_image_sharing_script:4.13i:*:*:*:*:*:*:* | 4.13i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_job_script:9.27i:*:*:*:*:*:*:* | 9.27i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_movie_script:7.51i:*:*:*:*:*:*:* | 7.51i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_multi_vendor_script:6.63i:*:*:*:*:*:*:* | 6.63i | Vulnerable | Ambittechnologies |
- cpe:2.3:a:ambittechnologies:itech_b2b_script:4.42i:*:*:*:*:*:*:* Versions 4.42i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_business_networking_script:8.26i:*:*:*:*:*:*:* Versions 8.26i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_caregiver_script:2.71i:*:*:*:*:*:*:* Versions 2.71i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_classifieds_script:7.41i:*:*:*:*:*:*:* Versions 7.41i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_dating_script:3.40i:*:*:*:*:*:*:* Versions 3.40i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_freelancer_script:5.27i:*:*:*:*:*:*:* Versions 5.27i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_image_sharing_script:4.13i:*:*:*:*:*:*:* Versions 4.13i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_job_script:9.27i:*:*:*:*:*:*:* Versions 9.27i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_movie_script:7.51i:*:*:*:*:*:*:* Versions 7.51i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_multi_vendor_script:6.63i:*:*:*:*:*:*:* Versions 6.63i Vulnerable ·Ambittechnologies
Show 2 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ambittechnologies:itech_social_networking_script:3.08i:*:*:*:*:*:*:* | 3.08i | Vulnerable | Ambittechnologies |
| cpe:2.3:a:ambittechnologies:itech_travel_script:9.49:*:*:*:*:*:*:* | 9.49 | Vulnerable | Ambittechnologies |
- cpe:2.3:a:ambittechnologies:itech_social_networking_script:3.08i:*:*:*:*:*:*:* Versions 3.08i Vulnerable ·Ambittechnologies
- cpe:2.3:a:ambittechnologies:itech_travel_script:9.49:*:*:*:*:*:*:* Versions 9.49 Vulnerable ·Ambittechnologies
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-12757
- 2026-10-03 Alias added: GHSA-35jh-65jp-wj73
References
Sources
- CVE-2017-12757 · CVE Program
- CVE-2017-12757 · NVD
- FIRST EPSS
- GHSA-35jh-65jp-wj73 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences