Vastal

Phpvid

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2015-2563

  • EPSS 2.19%
  • Veröffentlicht 20.03.2015 14:59:05
  • Zuletzt bearbeitet 06.05.2026 22:30:45

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. NOTE: The cat parameter vector is already covered by CVE-2008-4157.

4.3

CVE-2013-5312

Exploit
  • EPSS 3.22%
  • Veröffentlicht 19.08.2013 21:10:48
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2) cat parameter to groups.php.

7.5

CVE-2013-5311

Exploit
  • EPSS 2.28%
  • Veröffentlicht 19.08.2013 21:10:42
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4...

7.5

CVE-2008-4157

Exploit
  • EPSS 5.65%
  • Veröffentlicht 22.09.2008 18:34:15
  • Zuletzt bearbeitet 16.06.2026 22:57:17

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected.

4.3

CVE-2008-2335

Exploit
  • EPSS 4.01%
  • Veröffentlicht 19.05.2008 13:20:00
  • Zuletzt bearbeitet 16.06.2026 22:53:34

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party info...