Iatek's vulnerability footprint centers on a small set of web-facing portal and intranet application products that occupy a more prominent position in the landscape than their limited number might suggest. The recurring weakness classes—input-validation failures, cross-site scripting, and SQL injection—are characteristic of web application architectures, and public exploit code has frequently accompanied disclosures affecting this vendor's products. Defenders should prioritize patching and input sanitization on Iatek-based portals and intranet systems; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Iatek over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-1430HIGH SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the CatId parameter. | Mar 20, 2008 | 7.5 | 30 | NO | YES |
CVE-2005-0948HIGH SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter. | May 2, 2005 | 7.5 | 28 | NO | YES |
CVE-2005-1011HIGH SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter. | May 2, 2005 | 7.5 | 28 | NO | YES |
CVE-2005-4482MEDIUM Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter. | Dec 22, 2005 | 6.8 | 27 | NO | YES |
CVE-2002-1659HIGH user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable. | Dec 31, 2002 | 10.0 | 25 | NO | NO |
CVE-2004-1786MEDIUM PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to | Jan 4, 2004 | 5.0 | 23 | NO | YES |
CVE-2005-4483MEDIUM Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter. | Dec 22, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-4484MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to l | Dec 22, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-4485MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) fo | Dec 22, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-1012MEDIUM Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) th | May 2, 2005 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Iatek.
Media articles that mention a CVE ID that affects a product developed by Iatek — matched by CVE ID, not by vendor name.