Vulnerabilities > Itechscripts > Itechclassifieds

DATE CVE VULNERABILITY TITLE RISK
2015-01-13 CVE-2014-100020 SQL Injection vulnerability in Itechscripts Itechclassifieds 3.03.057
SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter.
network
low complexity
itechscripts CWE-89
7.5
2008-02-12 CVE-2008-0685 SQL Injection vulnerability in Itechscripts Itechclassifieds 3.0
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
network
low complexity
itechscripts CWE-89
7.5
2008-02-12 CVE-2008-0684 Cross-Site Scripting vulnerability in Itechscripts Itechclassifieds 3.0
Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.
4.3