vastal kayıtları
vastal üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 11
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')14
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-6367Kavram kanıtı | SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_evastal · i-tech buddy zone facebook clone · CWE-89 | Kritik9,8 | — | %3,0 | 29 Oca 2018 |
40Planlayın | CVE-2017-15975Kavram kanıtı | Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.vastal · dating zone · CWE-89 | Kritik9,8 | — | %3,0 | 29 Eki 2017 |
40Planlayın | CVE-2017-15991Kavram kanıtı | Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_byvastal · agent zone · CWE-89 | Kritik9,8 | — | %2,6 | 31 Eki 2017 |
32İzleyin | CVE-2008-4157Kavram kanıtı | SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat vastal · phpvid · CWE-89 | Yüksek7,5 | — | %5,6 | 22 Eyl 2008 |
31İzleyin | CVE-2013-5311Kavram kanıtı | Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pavastal · phpvid · CWE-89 | Yüksek7,5 | — | %2,2 | 19 Ağu 2013 |
31İzleyin | CVE-2015-2563İstismar yok | SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands vastal · phpvid · CWE-89 | Yüksek7,5 | — | %2,1 | 20 Mar 2015 |
30İzleyin | CVE-2009-3505İstismar yok | SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the vastal · mmorpg zone · CWE-89 | Yüksek7,5 | — | %1,1 | 30 Eyl 2009 |
30İzleyin | CVE-2009-3497İstismar yok | SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute vastal · agent zone · CWE-89 | Yüksek7,5 | — | %1,1 | 30 Eyl 2009 |
30İzleyin | CVE-2012-6526Kavram kanıtı | SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via tvastal · freelance zone · CWE-89 | Yüksek7,5 | — | %1,1 | 31 Oca 2013 |
30İzleyin | CVE-2008-3951Kavram kanıtı | SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbivastal · agent zone · CWE-89 | Yüksek7,5 | — | %1,0 | 10 Eyl 2008 |
30İzleyin | CVE-2008-3953Kavram kanıtı | SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQLvastal · shaadi zone · CWE-89 | Yüksek7,5 | — | %1,0 | 10 Eyl 2008 |
30İzleyin | CVE-2012-0982Kavram kanıtı | SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrvastal · agent zone · CWE-89 | Yüksek7,5 | — | %1,0 | 2 Şub 2012 |
30İzleyin | CVE-2009-3495Kavram kanıtı | SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_vastal · dvd zone · CWE-89 | Yüksek7,5 | — | %0,9 | 30 Eyl 2009 |
30İzleyin | CVE-2008-6209Kavram kanıtı | SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands viavastal · software zone · CWE-89 | Yüksek7,5 | — | %0,9 | 19 Şub 2009 |
18İzleyin | CVE-2008-2335Kavram kanıtı | Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitravastal · phpvid · CWE-79 | Orta4,3 | — | %4,0 | 19 May 2008 |
18İzleyin | CVE-2013-5312Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or Hvastal · phpvid · CWE-79 | Orta4,3 | — | %3,2 | 19 Ağu 2013 |
17İzleyin | CVE-2009-3496Kavram kanıtı | Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script orvastal · dvd zone · CWE-79 | Orta4,3 | — | %1,4 | 30 Eyl 2009 |
- CVE-2018-636740Planlayın
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_e
KritikCVSS 9,8Kavram kanıtıEPSS %3vastal · i-tech buddy zone facebook clone29 Oca 2018
- CVE-2017-1597540Planlayın
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.
KritikCVSS 9,8Kavram kanıtıEPSS %3vastal · dating zone29 Eki 2017
- CVE-2017-1599140Planlayın
Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by
KritikCVSS 9,8Kavram kanıtıEPSS %2vastal · agent zone31 Eki 2017
- CVE-2008-415732İzleyin
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat
YüksekCVSS 7,5Kavram kanıtıEPSS %5vastal · phpvid22 Eyl 2008
- CVE-2013-531131İzleyin
Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pa
YüksekCVSS 7,5Kavram kanıtıEPSS %2vastal · phpvid19 Ağu 2013
- CVE-2015-256331İzleyin
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands
YüksekCVSS 7,5İstismar yokEPSS %2vastal · phpvid20 Mar 2015
- CVE-2009-350530İzleyin
SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5İstismar yokEPSS %1vastal · mmorpg zone30 Eyl 2009
- CVE-2009-349730İzleyin
SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute
YüksekCVSS 7,5İstismar yokEPSS %1vastal · agent zone30 Eyl 2009
- CVE-2012-652630İzleyin
SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via t
YüksekCVSS 7,5Kavram kanıtıEPSS %1vastal · freelance zone31 Oca 2013
- CVE-2008-395130İzleyin
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbi
YüksekCVSS 7,5Kavram kanıtıEPSS %1vastal · agent zone10 Eyl 2008
- CVE-2008-395330İzleyin
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL
YüksekCVSS 7,5Kavram kanıtıEPSS %1vastal · shaadi zone10 Eyl 2008
- CVE-2012-098230İzleyin
SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitr
YüksekCVSS 7,5Kavram kanıtıEPSS %1vastal · agent zone2 Şub 2012
- CVE-2009-349530İzleyin
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_
YüksekCVSS 7,5Kavram kanıtıEPSS %0vastal · dvd zone30 Eyl 2009
- CVE-2008-620930İzleyin
SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via
YüksekCVSS 7,5Kavram kanıtıEPSS %0vastal · software zone19 Şub 2009
- CVE-2008-233518İzleyin
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitra
OrtaCVSS 4,3Kavram kanıtıEPSS %4vastal · phpvid19 May 2008
- CVE-2013-531218İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or H
OrtaCVSS 4,3Kavram kanıtıEPSS %3vastal · phpvid19 Ağu 2013
- CVE-2009-349617İzleyin
Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or
OrtaCVSS 4,3Kavram kanıtıEPSS %1vastal · dvd zone30 Eyl 2009