Skip to content
Noroxi

itechscripts records

24 published records for vendor itechscripts.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2017-15963
    40Plan

    iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    itechscripts · gigs scriptOct 29, 2017

  • CVE-2017-20130
    39Monitor

    Itech Real Estate Script search_property.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · real estate scriptJul 16, 2022

  • CVE-2017-20131
    39Monitor

    Itech News Portal information.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · news portal scriptJul 16, 2022

  • CVE-2017-20135
    39Monitor

    Itech Dating Script see_more_details.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · dating scriptJul 16, 2022

  • CVE-2017-20134
    39Monitor

    Itech Freelancer Script category.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · freelancer scriptJul 16, 2022

  • CVE-2017-20132
    39Monitor

    Itech Multi Vendor Script product-list.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · multi vendor scriptJul 16, 2022

  • CVE-2017-20133
    39Monitor

    Itech Job Portal Script admin improper authentication

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · job portal scriptJul 16, 2022

  • CVE-2017-20138
    39Monitor

    Itech Auction Script mcategory.php Blind sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    itechscripts · auction scriptJul 16, 2022

  • CVE-2012-4281
    31Monitor

    Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parame

    HighCVSS 7.5Proof of conceptEPSS 2%

    itechscripts · travelon expressAug 13, 2012

  • CVE-2014-100020
    30Monitor

    SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via th

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechclassifiedsJan 13, 2015

  • CVE-2008-3238
    30Monitor

    Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechbidsJul 21, 2008

  • CVE-2008-0776
    30Monitor

    SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id pa

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechbidsFeb 13, 2008

  • CVE-2012-4265
    30Monitor

    SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the ci

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · proman xpressAug 13, 2012

  • CVE-2008-0692
    30Monitor

    SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechbidsFeb 11, 2008

  • CVE-2008-0685
    30Monitor

    SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID p

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechclassifiedsFeb 11, 2008

  • CVE-2009-3968
    30Monitor

    Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id paramet

    HighCVSS 7.5Proof of conceptEPSS 1%

    itechscripts · itechbidsNov 18, 2009

  • CVE-2017-20136
    30Monitor

    Itech Classifieds Script subpage.php sql injection

    HighCVSS 7.5No exploitEPSS 1%

    itechscripts · classifieds scriptJul 16, 2022

  • CVE-2017-20137
    30Monitor

    Itech B2B Script catcompany.php sql injection

    HighCVSS 7.5No exploitEPSS 1%

    itechscripts · b2b scriptJul 16, 2022

  • CVE-2012-2939
    27Monitor

    Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by up

    MediumCVSS 6.5Proof of conceptEPSS 4%

    itechscripts · travelon expressMay 27, 2012

  • CVE-2012-2938
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 2%

    itechscripts · travelon expressMay 27, 2012

  • CVE-2008-3237
    18Monitor

    Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web scri

    MediumCVSS 4.3Proof of conceptEPSS 2%

    itechscripts · itechbidsJul 21, 2008

  • CVE-2012-4266
    17Monitor

    Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script

    MediumCVSS 4.3Proof of conceptEPSS 2%

    itechscripts · proman xpressAug 13, 2012

  • CVE-2008-0684
    17Monitor

    Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HT

    MediumCVSS 4.3Proof of conceptEPSS 1%

    itechscripts · itechclassifiedsFeb 11, 2008

  • CVE-2008-4872
    17Monitor

    Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3No exploitEPSS 1%

    itechscripts · itechbidsOct 31, 2008