Clicktech maintains a portfolio of web-based content and e-commerce applications—including gallery, blogging, shopping cart, auction, and contact management products—that emphasize ease of use for small businesses and web publishers. The vendor's vulnerability profile centers on SQL injection and related input-handling weaknesses that recur across these application platforms, a pattern typical of web applications that require robust input validation and prepared-statement discipline. Public exploit code has frequently been associated with this vendor's disclosures; current severity and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Clicktech over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0297HIGH SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters. NOTE: | Jan 27, 2009 | 7.5 | 31 | NO | YES |
CVE-2009-0462HIGH Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail paramete | Feb 10, 2009 | 7.5 | 28 | NO | YES |
CVE-2006-6181HIGH Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orde | Dec 1, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-6189HIGH SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter. | Dec 1, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-6050HIGH Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPlayer parameter to player.asp or the (2) | Nov 22, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-4857HIGH SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) fo | Sep 19, 2006 | 7.5 | 28 | NO | YES |
CVE-2007-3411HIGH SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter. | Jun 26, 2007 | 7.5 | 19 | NO | NO |
CVE-2006-6187HIGH Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a | Dec 1, 2006 | 7.5 | 19 | NO | NO |
CVE-2007-3412MEDIUM Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parame | Jun 26, 2007 | 4.3 | 15 | NO | NO |
CVE-2006-6188MEDIUM Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. | Dec 1, 2006 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Clicktech.
Media articles that mention a CVE ID that affects a product developed by Clicktech — matched by CVE ID, not by vendor name.