Read the docs

Vastal

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Vastal records in CISA KEV

No Vastal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Agent Zone · all components

Priority MEDIUM 47

Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom par…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2017-10-31 No fix listed CWE-89
Open these records in search →