Lucene search
+L

56 matches found

Cvelist
Cvelist
•added 2008/10/31 10:00 p.m.•39 views

CVE-2008-4872

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.00845EPSS
SaveExploits0References2
CVE
CVE
•added 2008/10/31 10:00 p.m.•57 views

CVE-2008-4872

The CVE-2008-4872 entry describes a Cross-site scripting (XSS) vulnerability in the iTechBids Gold 5.0 product, specifically in the bidhistory.php script, where an attacker can inject arbitrary web script or HTML through the item_id parameter. The affected component is the bidhistory.php code pat...

4.3CVSS5.6AI score0.00845EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/31 12:00 a.m.•4 views

CVE-2008-4872: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References2
Prion
Prion
•added 2008/07/21 4:41 p.m.•19 views

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

7.5CVSS9AI score0.01196EPSS
SaveExploits1References6Affected Software1
Prion
Prion
•added 2008/07/21 4:41 p.m.•19 views

Cross site scripting

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

4.3CVSS6.1AI score0.0172EPSS
SaveExploits2References6Affected Software1
NVD
NVD
•added 2008/07/21 4:41 p.m.•28 views

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

4.3CVSS5.7AI score0.0172EPSS
SaveExploits2References6
NVD
NVD
•added 2008/07/21 4:41 p.m.•30 views

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

7.5CVSS8.4AI score0.01196EPSS
SaveExploits1References6
CVE
CVE
•added 2008/07/21 4:00 p.m.•51 views

CVE-2008-3237

CVE-2008-3237 is a reported XSS vulnerability affecting ITechBids 7.0 Gold. The flaw occurs in forward_to_friend.php, where the productid parameter can be exploited to inject arbitrary web script or HTML. This impacts users who can be targeted via crafted input sent to the affected endpoint, pote...

4.3CVSS5.7AI score0.0172EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2008/07/21 4:00 p.m.•42 views

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

5.7AI score0.0172EPSS
SaveExploits2References6
CVE
CVE
•added 2008/07/21 4:00 p.m.•56 views

CVE-2008-3238

CVE-2008-3238 : Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) seller_id in sellers_othersitem.php, (2) productid in classifieds.php, and (3) id in shop.php. The connected records also reference ITechBids 8.0 vectors, ...

7.5CVSS8.5AI score0.01196EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2008/07/21 4:00 p.m.•37 views

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

8.4AI score0.01196EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/21 12:00 a.m.•4 views

CVE-2008-3238: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

7.5CVSS6.4AI score0.01196EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/21 12:00 a.m.•5 views

CVE-2008-3237: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

4.3CVSS5.9AI score0.0172EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/07/15 12:00 a.m.•36 views

itechbids-sqlxss.txt

!R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php PoC :...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/07/14 12:00 a.m.•20 views

ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php Po...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/07/13 12:00 a.m.•27 views

ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ITechBids 7.0 Gold XSS/SQL Multiple Remote Vulnerabilities ============================================================ ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/07/13 12:00 a.m.•36 views

ITechBids 7.0 gold - Cross-Site Scripting / SQL Injection

!R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php PoC :...

7.5CVSS5.8AI score0.0172EPSS
SaveExploits2
exploitpack
exploitpack
•added 2008/07/13 12:00 a.m.•19 views

ITechBids 7.0 gold - Cross-Site Scripting SQL Injection

ITechBids 7.0 gold - Cross-Site Scripting SQL Injection !R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS:...

0.3AI score
SaveExploits0
Prion
Prion
•added 2008/02/14 12:00 a.m.•20 views

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

7.5CVSS9.1AI score0.0114EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2008/02/14 12:00 a.m.•28 views

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

7.5CVSS8.4AI score0.0114EPSS
SaveExploits1References3
Rows per page
Query Builder