CVE-2017-20141

CVE-2017-20141 is a critical SQL injection vulnerability in Itech Movie Portal Script version 7.36, specifically affecting the /movie.php file through manipulation of the 'f' argument. This flaw allows for remote exploitation, potentially leading to full compromise of confidentiality, integrity, and availability. With a CVSS score of 9.8, the attack requires no authentication or user interaction and has low attack complexity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available Metasploit, Nuclei, or ExploitDB modules, and community discussion and media coverage are minimal.