Vld Interactive

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Vld Interactive records in CISA KEV

No Vld Interactive vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vldpersonals 2 records LOW

Records

2 records in Vldpersonals · all components

TI-2014-07337 CVE-2014-9005 · GHSA-fp69-gqq6-rmjp

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the (1) country, (2) gender1, or ((3) gender2 parameter in a search action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01209 Published 2014-11-20 No fix listed CWE-89

TI-2014-07336 CVE-2014-9004 · GHSA-w433-hwwm-r4qw

Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a member_profile action to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2014-11-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0