Vastal

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Vastal records in CISA KEV

No Vastal vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Dating Zone · all components

TI-2017-11705 CVE-2017-15975 · GHSA-gvgp-p449-hg3j

MEDIUM 48

Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-10-29 No fix listed CWE-89