Vastal I-tech

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Vastal I-tech records in CISA KEV

No Vastal I-tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Buddy Zone 3 records LOW Cosmetics Zone 1 record LOW Dating Zone 1 record LOW Dvd Zone 1 record LOW Freelance Zone 1 record LOW Jobs Zone 1 record LOW Mag Zone 1 record LOW Mmorpg Zone 1 record LOW

Records

3 records in Buddy Zone · all components

TI-2007-03419 CVE-2007-3526 · GHSA-vmmw-r7wc-96jr

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote…

LOW 38

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02493 Published 2007-07-03 No fix listed

TI-2006-03386 CVE-2006-3494 · GHSA-fgwm-wrcv-mc8w

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote…

LOW 36

Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) vie…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0346 Published 2006-07-10 No fix listed CWE-79

TI-2007-03442 CVE-2007-3549 · GHSA-349h-m66g-cww7

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers…

LOW 35

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01041 Published 2007-07-03 No fix listed

Open these records in search →

Critical	0
High	13
Medium	1
Low	0
No CVSS	0