← Back

Vastal I Tech

vastal_i-tech

14 CVEs • 12 products

Products (12)

Click to collapse
Toggle
Buddy Zone
buddy_zone
3 CVEs
Phpvid
phpvid
1 CVE
Mmorpg Zone
mmorpg_zone
1 CVE
Dating Zone
dating_zone
1 CVE
Visa Zone
visa_zone
1 CVE
Jobs Zone
jobs_zone
1 CVE
Mag Zone
mag_zone
1 CVE
Dvd Zone
dvd_zone
1 CVE
Cosmetics Zone
cosmetics_zone
1 CVE
Toner Cart
toner_cart
1 CVE
Share Zone
share_zone
1 CVE
Freelance Zone
freelance_zone
1 CVE

CVEs (14)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4469
1Vastal I Tech
1Freelance Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter.
CVE-2008-4468
1Vastal I Tech
1Share Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-4467
1Vastal I Tech
1Toner Cart
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-4466
1Vastal I Tech
1Cosmetics Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2008-4465
1Vastal I Tech
1Dvd Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2008-4464
1Vastal I Tech
1Mag Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2008-4463
1Vastal I Tech
1Jobs Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVE-2008-4462
1Vastal I Tech
1Visa Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVE-2008-4461
1Vastal I Tech
1Dating Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter.
CVE-2008-4460
1Vastal I Tech
1Mmorpg Zone
Apr 23, 2026
Oct 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter.
CVE-2007-3610
1Vastal I Tech
1Phpvid
Apr 23, 2026
Jul 6, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVE-2007-3549
1Vastal I Tech
1Buddy Zone
Apr 23, 2026
Jul 3, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2007-3526
1Vastal I Tech
1Buddy Zone
Apr 23, 2026
Jul 3, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, o...Show more
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the news_id parameter to view_news.php, (2) the cat_id parameter to view_events.php, or (3) the member_id parameter to video_gallery.php.Show less
CVE-2006-3494
1Vastal I Tech
1Buddy Zone
Apr 16, 2026
Jul 10, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) vie...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the (1) cat_id parameter to (a) view_classifieds.php; (2) id parameter in (b) view_ad.php; (3) event_id parameter in (c) view_event.php, (d) delete_event.php, and (e) edit_event.php; and (4) group_id in (f) view_group.php.Show less