Lucene search

classsys.txt

🗓️ 21 Nov 2006 00:00:00Reported by benjamin mossType

packetstorm🔗 packetstormsecurity.com👁 13 Views

Vulnerabilities found in Classified System - medium ris

`vendor site: http://www.vspin.net/  
product :Classified System  
bug:injection sql  
risk : medium  
  
injection sql :  
/cat.asp?cat='[sql]  
/search.asp?in=y&keyword='[sql]  
/search.asp?in=y&keyword=1&submit=Search&order='[sql]  
/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort='[sql]  
/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&  
cat=0&menuSelect='[sql]  
/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&  
cat=0&menuSelect=1&type=1&city=1&minprice=1&maxprice=1&state='[sql]  
  
xss get:  
/cat.asp?cat=1&catname=[xss]  
/search.asp?in=y&keyword=1&submit=Search&order=tbl_classads.col_id&sort=DESC&  
cat=0&menuSelect=1&type=1&city=1&minprice=[xss]  
  
laurent gaffie & benjamin mosse  
http://s-a-p.ca/  
contact: [email protected]  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Nov 2006 00:00Current

7.4High risk

Vulners AI Score7.4