Vulnerabilities

TI-2009-00442 CVE-2009-0462 · GHSA-5v84-wgmr-h73h

Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart…

LOW 35

Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassw…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-02-06 No fix listed CWE-89

TI-2009-00280 CVE-2009-0297 · GHSA-mrg2-3353-vhcw

SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to…

LOW 37

SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02081 Published 2009-01-27 No fix listed CWE-89

TI-2007-03306 CVE-2007-3412 · GHSA-8xmw-vwcq-7673

Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and…

LOW 22

Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2007-06-26 No fix listed

TI-2007-03305 CVE-2007-3411 · GHSA-wjqv-5qh4-crjj

SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier…

LOW 35

SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2007-06-26 No fix listed

TI-2006-05953 CVE-2006-6189 · GHSA-pm35-r9m4-68jr

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote…

LOW 35

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01114 Published 2006-12-01 No fix listed

TI-2006-05952 CVE-2006-6188 · GHSA-3hgx-68q9-pcf8

Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery…

LOW 23

Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0137 Published 2006-12-01 No fix listed

TI-2006-05951 CVE-2006-6187 · GHSA-qc7p-f736-wjm6

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers…

LOW 36

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01452 Published 2006-12-01 No fix listed

TI-2006-05945 CVE-2006-6181 · GHSA-9cfj-w9w6-8wmg

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow…

LOW 35

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01226 Published 2006-12-01 No fix listed

TI-2006-05818 CVE-2006-6050 · GHSA-ccww-c84c-mm5c

Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPlayer parameter to player.asp or the (2) tournament_id parameter to tournaments.a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2006-11-22 No fix listed

TI-2006-04684 CVE-2006-4857 · GHSA-8x95-jpw3-wx7x

SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog…

LOW 38

SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02532 Published 2006-09-19 No fix listed

TI-2006-02933 CVE-2006-3029 · GHSA-3mj8-5fpc-8c72

Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and…

LOW 24

Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2006-06-15 No fix listed

TI-2006-02930 CVE-2006-3026 · GHSA-g6m7-4q7h-7vrv

Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2006-06-15 No fix listed

Vulnerabilities

Filters