Vulnerabilities (CVE)

Filtered by vendor Vastal Subscribe
Filtered by product Dvd Zone
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3496 1 Vastal 1 Dvd Zone 2024-11-21 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter.
CVE-2009-3495 1 Vastal 1 Dvd Zone 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465.