Classifieds Script (type) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Classifieds Script type Remote SQL Injection Vulnerability ============================================================ POC :...

Improper access control

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql...

CVE-2008-7080

The CVE refers to CVE-2008-7080 in Team PHP PHP Classifieds Script, where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to obtain database credentials via a direct request to admin/backup/datadump.sql. The NVD entry lists a medium severity...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2785

CVE-2009-2785 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the PHP Open Classifieds Script. The documented vectors are (1) the page parameter to buy.php and (2) the id parameter to contact.php and tellafriend.php, enabling remote attackers to inject arbitrary web scri...

Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection

Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

CVE-2008-6325 concerns Softbiz Classifieds Script. The connected documents confirm multiple XSS vulnerabilities affecting the product, including vectors in showcategory.php (radio parameter), advertisers/signinform.php (msg parameter), gallery.php (radio), lostpassword.php (msg), and admin pages ...

CVE-2008-6306

Cross-site scripting XSS vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6306

Cross-site scripting XSS vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6306

CVE-2008-6306 describes a cross-site scripting (XSS) vulnerability in Softbiz Classifieds Script, specifically in signinform.php, exploitable via the msg parameter to inject arbitrary web script/HTML. The note indicates the provenance is unknown and details come from third-party information. Conn...

Softbiz Classifieds Script - advertiserssigninform.php?msg Cross-Site Scripting

Softbiz Classifieds Script - advertiserssigninform.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/32569/info Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32569/info Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Softbiz Classifieds Script - adminadminhome.php?msg Cross-Site Scripting

Softbiz Classifieds Script - adminadminhome.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/32569/info Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

classifieds-xss.txt

--------------------------------------------------------- Portal Name: Classifieds Script Vendor : http://www.softbizscripts.com/online-classifieds-script-features.php Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...