Vastal

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Vastal records in CISA KEV

No Vastal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpvid 5 records MEDIUM Agent Zone 4 records MEDIUM Dvd Zone 2 records LOW Dating Zone 1 record MEDIUM Freelance Zone 1 record LOW I-tech Buddy Zone Facebook Clone 1 record MEDIUM Mmorpg Zone 1 record LOW Shaadi Zone 1 record LOW

Records

5 records in Phpvid · all components

TI-2008-03988 CVE-2008-4157 · GHSA-r5cc-g84x-qhg2

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote…

MEDIUM 41

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05648 Published 2008-09-22 No fix listed CWE-89

TI-2015-02252 CVE-2015-2563 · GHSA-4wvm-346h-cg2w

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows…

LOW 37

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the order_by parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02173 Published 2015-03-20 No fix listed CWE-89

TI-2013-04549 CVE-2013-5311 · GHSA-69w9-hp3v-54xq

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02224 Published 2013-08-19 No fix listed CWE-89

TI-2008-02239 CVE-2008-2335 · GHSA-hvfg-cwc6-p48p

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID…

LOW 27

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04006 Published 2008-05-19 No fix listed CWE-79

TI-2013-04550 CVE-2013-5312 · GHSA-mjjr-gw5v-v4fq

Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2) cat parameter to gro…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03217 Published 2013-08-19 No fix listed CWE-79

Open these records in search →

Critical	3
High	11
Medium	3
Low	0
No CVSS	0