RSS   Vulnerabilities for 'Dvd zone'   RSS

2009-09-30
 
CVE-2009-3496

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter.

 
 
CVE-2009-3495

CWE-89
 

 
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465.

 

 >>> Vendor: Vastal 9 Products
Phpvid
Agent zone
Shaadi zone
Software zone
Dvd zone
Mmorpg zone
Freelance zone
Dating zone
I-tech buddy zone facebook clone


Copyright 2019, cxsecurity.com

 

Back to Top