Vulnerabilities

TI-2017-14262 CVE-2017-20196 · GHSA-r793-4q47-gmj4

Itechscripts School Management Software notice-edit.php sql injection

MEDIUM 57

A vulnerability was found in Itechscripts School Management Software 2.75.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2025-01-26 No fix listed CWE-74

TI-2017-14204 CVE-2017-20138 · GHSA-pv83-6m4h-4cv8

Itech Auction Script mcategory.php Blind sql injection

MEDIUM 43

A vulnerability was found in Itech Auction Script 6.49.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00652 Published 2022-07-16 No fix listed CWE-89

TI-2017-14203 CVE-2017-20137 · GHSA-vrc4-vjqp-434m

Itech B2B Script catcompany.php sql injection

LOW 34

A vulnerability was found in Itech B2B Script 4.28.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2022-07-16 No fix listed CWE-89

TI-2017-14202 CVE-2017-20136 · GHSA-2q36-87w3-hm7h

Itech Classifieds Script subpage.php sql injection

LOW 34

A vulnerability classified as critical has been found in Itech Classifieds Script 7.27.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2022-07-16 No fix listed CWE-89

TI-2017-14201 CVE-2017-20135 · GHSA-mc9v-fmrv-2pqp

Itech Dating Script see_more_details.php sql injection

HIGH 75

A vulnerability classified as critical was found in Itech Dating Script 3.26.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2022-07-16 No fix listed CWE-89

TI-2017-14200 CVE-2017-20134 · GHSA-8jmp-fhm4-9fj4

Itech Freelancer Script category.php sql injection

HIGH 75

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00893 Published 2022-07-16 No fix listed CWE-89

TI-2017-14199 CVE-2017-20133 · GHSA-xrww-3rp8-cfmx

Itech Job Portal Script admin improper authentication

MEDIUM 49

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00736 Published 2022-07-16 No fix listed CWE-287

TI-2017-14198 CVE-2017-20132 · GHSA-qrh6-6mqr-3g5g

Itech Multi Vendor Script product-list.php sql injection

HIGH 75

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00893 Published 2022-07-16 No fix listed CWE-89

TI-2017-14197 CVE-2017-20131 · GHSA-whcw-8q99-gh38

Itech News Portal information.php sql injection

HIGH 75

A vulnerability was found in Itech News Portal 6.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01056 Published 2022-07-16 No fix listed CWE-89

TI-2017-14196 CVE-2017-20130 · GHSA-4xjg-4727-ccc3

Itech Real Estate Script search_property.php sql injection

HIGH 75

A vulnerability was found in Itech Real Estate Script 3.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01056 Published 2022-07-16 No fix listed CWE-89

TI-2017-11693 CVE-2017-15963 · GHSA-vvrh-3pvx-mjmw

iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or…

MEDIUM 46

iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02066 Published 2017-10-29 No fix listed CWE-89

TI-2014-08284 CVE-2014-100020 · GHSA-2jfm-6r79-h6mp

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote…

LOW 36

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01314 Published 2015-01-13 No fix listed CWE-89

TI-2012-03661 CVE-2012-4281 · GHSA-cr9v-vxqx-f7xm

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday.php or (2) holiday_book.php, (3) id parameter to pages.php, (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02161 Published 2012-08-13 No fix listed CWE-89

TI-2012-03646 CVE-2012-4266 · GHSA-jf46-jf6f-38v2

Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1…

LOW 23

Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the cl_comments parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01648 Published 2012-08-13 No fix listed CWE-79

TI-2012-03645 CVE-2012-4265 · GHSA-g789-32xp-7x78

SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote…

LOW 35

SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01047 Published 2012-08-13 No fix listed CWE-89

TI-2012-02551 CVE-2012-2939 · GHSA-qqqh-wm2v-8949

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote…

LOW 35

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hote…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03843 Published 2012-05-27 No fix listed

TI-2012-02550 CVE-2012-2938 · GHSA-mxx5-2h9x-347v

Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01791 Published 2012-05-27 No fix listed CWE-79

TI-2009-03765 CVE-2009-3968 · GHSA-5hx3-5f7f-xvj2

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php, (2) cate_id parameter to category.php, (3) id parameter to n…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2009-11-18 No fix listed CWE-89

TI-2008-04629 CVE-2008-4872 · GHSA-4rq9-7j28-jccw

Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-10-31 No fix listed CWE-79

TI-2008-03100 CVE-2008-3238 · GHSA-rg87-qff6-85m5

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter in sellers_othersitem.php, (2) the productid parameter in classifieds.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-07-21 No fix listed CWE-89

TI-2008-03099 CVE-2008-3237 · GHSA-gc33-wppm-8h9m

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold…

LOW 23

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2008-07-21 No fix listed CWE-79

TI-2008-00742 CVE-2008-0776 · GHSA-h8rx-2q5f-5vwg

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers…

LOW 35

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0114 Published 2008-02-13 No fix listed CWE-89

TI-2008-00660 CVE-2008-0692 · GHSA-9v48-2p62-wqxh

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote…

LOW 35

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-02-12 No fix listed CWE-89

TI-2008-00653 CVE-2008-0685 · GHSA-5wrh-mqrh-qmxx

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote…

LOW 35

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00959 Published 2008-02-12 No fix listed CWE-89

TI-2008-00652 CVE-2008-0684 · GHSA-5qc7-3rq9-3wc2

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01446 Published 2008-02-12 No fix listed CWE-79

Vulnerabilities

Filters