CVE-2008-1838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

BosClassifieds 3.0 - index.php SQL Injection

BosClassifieds 3.0 - index.php SQL Injection !R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, No...

CVE-2008-1224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

PT-2006-4402 · Bosclassifieds · Bosclassifieds Classified Ads

Name of the Vulnerable Software and Affected Versions: BosClassifieds Classified Ads affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to various PHP files, including "index.php", "recent.php",...

CVE-2006-3527: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to 1 index.php, 2 recent.php, 3 account.php, 4 classified.php, or 5 search.php...