Vulnerabilities

TI-2014-08284 CVE-2014-100020 · GHSA-2jfm-6r79-h6mp

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote…

LOW 36

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01314 Published 2015-01-13 No fix listed CWE-89

TI-2008-00653 CVE-2008-0685 · GHSA-5wrh-mqrh-qmxx

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote…

LOW 35

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00959 Published 2008-02-12 No fix listed CWE-89

TI-2008-00652 CVE-2008-0684 · GHSA-5qc7-3rq9-3wc2

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01446 Published 2008-02-12 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote…

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote…

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows…