CVE-2009-2567

The CVE-2009-2567 entry describes a SQL injection vulnerability in the Joomla! extension Almond Classifieds (com_aclassf) version 5.6.2. The flaw allows remote attackers to inject arbitrary SQL commands via the id parameter to index.php. The connected records confirm the affected component/versio...

Joomla! Component Almond Classifieds 7.5 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/35815/info Almond Classifieds Component for Joomla! is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker ...

Joomla! Component Almond Classifieds 7.5 - Cross-Site Scripting SQL Injection

Joomla! Component Almond Classifieds 7.5 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/35815/info Almond Classifieds Component for Joomla! is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to...

Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Joomla Almond Classifieds 5.6.2 SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln

Exploit for unknown platform in category web applications ======================================================== Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln ========================================================...

Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection

Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection |...

Unfixed XSS vulnerability at www.almondplaza.com

Security researcher A.D.T, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.almondplaza.com, which at the time of submission ranked 727563 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2007. It is...

CVE-2005-4313

SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4312

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4313

CVE-2005-4313 concerns a SQL injection in the AlmondSoft Almond Personals 4.05 product. The vulnerability is in the file index.php and is exploitable by supplying an arbitrary value for the id parameter, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is described a...

CVE-2005-4312

The CVE-2005-4312 entry describes an SQL injection vulnerability in AlmondSoft Almond Classifieds 5.02, exploitable via the id parameter in index.php. The affected component is the web application’s index.php handling of id values, enabling remote attackers to inject SQL commands. CVSS2 context f...

CVE-2005-4312

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4313

SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter...

AlmondSoft Products SQL inj.

AlmondSoft Products SQL inj. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/almondsoft-products-sql-inj.html vendor:http://www.almondsoft.com/ affected products: Almond Classifieds 5.02 and Pro edition,Standart edition,E-Commerce Edition. and...

CVE-2005-3741

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

CVE-2005-3741

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

CVE-2005-3741

CVE-2005-3741 affects Almond Classifieds, where improper password verification allows bypassing access restrictions. Descriptions across sources consistently state the issue as a password verification problem enabling unauthorized access. No specific affected versions or root-cause details beyond...

almondClassifieds.txt

A vulnerability discovered in Almond Classifeds http://www.almondsoft.com/alcl.html vulnerability is due omit check of password in "editform" user can edit any add in the classifieds if we post new add we can edit our add in the "editform" section there are 2 hidden fields: by changing the number...