Vastal I-tech

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Vastal I-tech records in CISA KEV

No Vastal I-tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Buddy Zone 3 records LOW Cosmetics Zone 1 record LOW Dating Zone 1 record LOW Dvd Zone 1 record LOW Freelance Zone 1 record LOW Jobs Zone 1 record LOW Mag Zone 1 record LOW Mmorpg Zone 1 record LOW

Records

14 records

TI-2007-03419 CVE-2007-3526 · GHSA-vmmw-r7wc-96jr

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote…

LOW 38

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02493 Published 2007-07-03 No fix listed

TI-2006-03386 CVE-2006-3494 · GHSA-fgwm-wrcv-mc8w

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote…

LOW 36

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) vie…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0346 Published 2006-07-10 No fix listed CWE-79

TI-2008-04261 CVE-2008-4469 · GHSA-j5jc-5c4j-9xfj

SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows…

LOW 35

SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-10-07 No fix listed CWE-89

TI-2008-04260 CVE-2008-4468 · GHSA-329w-pqgx-8qpx

SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote…

LOW 35

SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-10-07 No fix listed CWE-89

TI-2008-04259 CVE-2008-4467 · GHSA-8c7g-chwg-xgjf

SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows…

LOW 35

SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-07 No fix listed CWE-89

TI-2008-04258 CVE-2008-4466 · GHSA-c7c5-c859-5x65

SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone…

LOW 35

SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-10-07 No fix listed CWE-89

TI-2008-04257 CVE-2008-4465 · GHSA-j7hv-gh42-47g6

SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote…

LOW 35

SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-10-07 No fix listed CWE-89

TI-2008-04256 CVE-2008-4464 · GHSA-jpwx-jmf5-3jqg

SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote…

LOW 35

SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-10-07 No fix listed CWE-89

TI-2008-04255 CVE-2008-4463 · GHSA-5954-94x7-j88h

SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote…

LOW 35

SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-10-07 No fix listed CWE-89

TI-2008-04254 CVE-2008-4462 · GHSA-fww7-c55w-7jjx

SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote…

LOW 35

SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-10-07 No fix listed CWE-89

TI-2008-04253 CVE-2008-4461 · GHSA-hmpw-7f5f-6xfh

SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone…

LOW 35

SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2008-10-07 No fix listed CWE-89

TI-2008-04252 CVE-2008-4460 · GHSA-ph3j-86rg-7qjp

SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote…

LOW 35

SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-07 No fix listed CWE-89

TI-2007-03501 CVE-2007-3610 · GHSA-773p-xv6c-mvj8

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote…

LOW 35

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01223 Published 2007-07-06 No fix listed

TI-2007-03442 CVE-2007-3549 · GHSA-349h-m66g-cww7

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers…

LOW 35

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01041 Published 2007-07-03 No fix listed

Open these records in search →

Critical	0
High	13
Medium	1
Low	0
No CVSS	0