Itechscripts

16 CVEs across 15 Itechscripts products. Browse Itechscripts vulnerabilities, severities, and proof-of-concept exploits.

Itechscripts products with known CVEs

ProductCVEs
Itechbids6
Itechclassifieds3
Travelon Express3
Proman Xpress2
Auction Script1
B2b Script1
Classifieds Script1
Dating Script1
Freelancer Script1
Gigs Script1
Job Portal Script1
Multi Vendor Script1
News Portal Script1
Real Estate Script1
School Management Software1
Itechscripts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2017-20196Medium6.32025-01-26A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice…
CVE-2017-20138Medium6.32022-07-16A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipu…
CVE-2017-20137Medium6.32022-07-16A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The…
CVE-2017-20136Medium6.32022-07-16A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function of the file /subpage.php. The manipulat…
CVE-2017-20135Medium6.32022-07-16A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /see_more_…
CVE-2017-20134Medium6.32022-07-16A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the…
CVE-2017-20133High7.32022-07-16A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation…
CVE-2017-20132Medium6.32022-07-16A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-sh…
CVE-2017-20131Medium6.32022-07-16A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/inform…
CVE-2017-20130Medium6.32022-07-16A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the…
CVE-2017-15963Critical9.82017-10-29iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.
CVE-2014-1000202015-01-13SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parame…
CVE-2012-42812012-08-13Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday…
CVE-2012-42662012-08-13Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the cl…
CVE-2012-42652012-08-13SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2012-29392012-05-27Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with…
CVE-2012-29382012-05-27Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday nam…
CVE-2009-39682009-11-18Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php…
CVE-2008-48722008-11-01Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id…
CVE-2008-32382008-07-21Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter in seller…
CVE-2008-32372008-07-21Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-07762008-02-14SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVE-2008-06922008-02-12SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVE-2008-06852008-02-12SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
CVE-2008-06842008-02-12Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID pa…