Iatek

11 CVEs across 5 Iatek products. Browse Iatek vulnerabilities, severities, and proof-of-concept exploits.

Iatek products with known CVEs

ProductCVEs
Portalapp5
Siteenable3
Aspapp1
Intranetapp1
Projectapp1
Iatek CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-14302008-03-20SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the CatId parameter.
CVE-2005-44852005-12-22Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keyword…
CVE-2005-44842005-12-22Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) re…
CVE-2005-44832005-12-22Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_…
CVE-2005-44822005-12-22Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_p…
CVE-2005-10122005-05-02Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter t…
CVE-2005-10112005-05-02SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
CVE-2005-09492005-05-02Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2005-09482005-05-02SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.
CVE-2004-17862004-01-04PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information vi…
CVE-2002-16592002-12-31user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.