Priority LOW 35
SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01042 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00967 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0101 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00997 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00967 · Published 2008-10-07 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01223 · Published 2007-07-06 · No fix listed
Priority LOW 35
SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01041 · Published 2007-07-03 · No fix listed
Priority LOW 38
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, o…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02493 · Published 2007-07-03 · No fix listed
Priority LOW 36
Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) vie…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0346 · Published 2006-07-10 · No fix listed CWE-79