Vastal

Phpvid

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2015-2563

  • EPSS 0.52%
  • Veröffentlicht 20.03.2015 14:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. NOTE: The cat parameter vector is already covered by CVE-2008-4157.

4.3

CVE-2013-5312

Exploit
  • EPSS 6.26%
  • Veröffentlicht 19.08.2013 21:10:48
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2) cat parameter to groups.php.

7.5

CVE-2013-5311

Exploit
  • EPSS 0.5%
  • Veröffentlicht 19.08.2013 21:10:42
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4...

7.5

CVE-2008-4157

Exploit
  • EPSS 4.03%
  • Veröffentlicht 22.09.2008 18:34:15
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected.

4.3

CVE-2008-2335

Exploit
  • EPSS 11.4%
  • Veröffentlicht 19.05.2008 13:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party info...