CVE-2007-6567

CVE-2007-6567 affects XZero Community Classifieds up to version 4.95.11. The vulnerability resides in the script index.php where a directory traversal can be triggered via a pagename parameter in a page view action, allowing an attacker to include and execute arbitrary local files. This can impac...

CVE-2007-6568

CVE-2007-6568 describes a PHP remote file inclusion vulnerability in the config.inc.php file of XZero Community Classifieds 4.95.11 and earlier . The issue allows remote attackers to execute arbitrary PHP code via a URL supplied in the path_escape parameter. The NVD metrics indicate a base score ...

CVE-2007-6566

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php...

CVE-2007-6568

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

CVE-2007-6567

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...

xzero-rfi.txt

XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in config.inc.php: line303:...

xzero-lfisql.txt

!/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst cod3d and f0unded by Kw3rLn from Romanian...

XZero Community Classifieds <= v4.95.11 LFI & SQL Injection

!/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst cod3d and f0unded by Kw3rLn from Romanian...

XZero Community Classifieds <= 4.95.11 LFI / SQL Injection

No description provided by source. !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...

XZero Community Classifieds &lt;= 4.95.11 Remote File Inclusion Vuln

No description provided by source. XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in...

XZero Community Classifieds <= 4.95.11 Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= XZero Community Classifieds = 4.95.11 Remote File Inclusion Vuln ================================================================= XZero Community Classifieds = v4.95.11...

XZero Community Classifieds 4.95.11 - Local File Inclusion SQL Injection

XZero Community Classifieds 4.95.11 - Local File Inclusion SQL Injection !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...

XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection

!/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread: http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst cod3d and f0unded by Kw3rLn...

XZero Community Classifieds 4.95.11 - Remote File Inclusion

XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.org we have in config.inc.php: line303:...

XZero Community Classifieds 4.95.11 - Remote File Inclusion

XZero Community Classifieds 4.95.11 - Remote File Inclusion XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.o...

XZero Community Classifieds <= 4.95.11 LFI / SQL Injection

Exploit for unknown platform in category web applications ========================================================== XZero Community Classifieds = 4.95.11 LFI / SQL Injection ========================================================== !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL...

XZero Community Classifieds &lt;= 4.95.11 LFI / SQL Injection

No description provided by source. !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL Injection linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar original thread:...

PHP Real Estate Classifieds &quot;id&quot; SQL Injection

t0pP8uZz & xprog have reported a vulnerability in PHP Real Estate Classifieds, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "id" parameter in fullnews.php is not properly sanitised before being used in SQL queries. This can be exploited to...

CVE-2007-6463

Multiple cross-site scripting XSS vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."...

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...