Vulnerabilities

TI-2009-03334 CVE-2009-3496 · GHSA-r7jg-rv4q-6j69

Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows…

LOW 23

Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01452 Published 2009-09-30 No fix listed CWE-79

TI-2009-03333 CVE-2009-3495 · GHSA-xrqq-rjw2-jp5x

SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote…

LOW 35

SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2009-09-30 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows…

SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote…