Itechscripts

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Itechscripts records in CISA KEV

No Itechscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Itechbids 6 records LOW Itechclassifieds 3 records LOW Travelon Express 3 records LOW Proman Xpress 2 records LOW Auction Script 1 record MEDIUM B2b Script 1 record LOW Classifieds Script 1 record LOW Dating Script 1 record HIGH

Records

6 records in Itechbids · all components

TI-2009-03765 CVE-2009-3968 · GHSA-5hx3-5f7f-xvj2

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php, (2) cate_id parameter to category.php, (3) id parameter to n…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2009-11-18 No fix listed CWE-89

TI-2008-03100 CVE-2008-3238 · GHSA-rg87-qff6-85m5

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter in sellers_othersitem.php, (2) the productid parameter in classifieds.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-07-21 No fix listed CWE-89

TI-2008-00742 CVE-2008-0776 · GHSA-h8rx-2q5f-5vwg

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers…

LOW 35

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0114 Published 2008-02-13 No fix listed CWE-89

TI-2008-00660 CVE-2008-0692 · GHSA-9v48-2p62-wqxh

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote…

LOW 35

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-02-12 No fix listed CWE-89

TI-2008-03099 CVE-2008-3237 · GHSA-gc33-wppm-8h9m

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold…

LOW 23

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2008-07-21 No fix listed CWE-79

TI-2008-04629 CVE-2008-4872 · GHSA-4rq9-7j28-jccw

Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-10-31 No fix listed CWE-79

Open these records in search →

Critical	8
High	10
Medium	7
Low	0
No CVSS	0