CVE-2008-4872

The CVE-2008-4872 entry describes a Cross-site scripting (XSS) vulnerability in the iTechBids Gold 5.0 product, specifically in the bidhistory.php script, where an attacker can inject arbitrary web script or HTML through the item_id parameter. The affected component is the bidhistory.php code pat...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

Cross site scripting

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3237

CVE-2008-3237 is a reported XSS vulnerability affecting ITechBids 7.0 Gold. The flaw occurs in forward_to_friend.php, where the productid parameter can be exploited to inject arbitrary web script or HTML. This impacts users who can be targeted via crafted input sent to the affected endpoint, pote...

CVE-2008-3238

CVE-2008-3238 : Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) seller_id in sellers_othersitem.php, (2) productid in classifieds.php, and (3) id in shop.php. The connected records also reference ITechBids 8.0 vectors, ...

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

itechbids-sqlxss.txt

!R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php PoC :...

ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php Po...

ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ITechBids 7.0 Gold XSS/SQL Multiple Remote Vulnerabilities ============================================================ ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website...

ITechBids 7.0 gold - Cross-Site Scripting / SQL Injection

!R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php PoC :...

ITechBids 7.0 gold - Cross-Site Scripting SQL Injection

ITechBids 7.0 gold - Cross-Site Scripting SQL Injection !R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS:...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

No description provided by source. ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

CVE-2008-0776 concerns SQL injection in iTechBids Gold 6.0’s detail.php via the item_id parameter. The vulnerability enables remote attackers to alter or disclose database data by crafting input that is not properly sanitized. Affected component is the detail.php script; root cause is improper ha...

CVE-2008-0692

CVE-2008-0692 describes an SQL injection in the file bidhistory.php of iTechBids 3 Gold and 5.0, allowing remote attackers to execute arbitrary SQL via the item_id parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication required,...