CVE-2006-5208

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...

CVE-2006-5208

CVE-2006-5208 affects PHP Classifieds 7.1. It contains SQL injection vulnerabilities in two parameters: catid_search (search.php) and catid (index.php). The underlying issue is unsanitized input allowing remote attackers to execute arbitrary SQL commands. Reported impact is that an attacker can r...

CVE-2006-5208

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...

PHP Classifieds 7.1 - index.php SQL Injection

PHP Classifieds 7.1 - index.php SQL Injection ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHP Classifieds 7.1 index.php Remote SQL Injection Vulnerability ================================================================== ---- App Name: PHP Classifieds = 7.1 App...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

No description provided by source. ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql --...

PHP Classifieds 7.1 - 'index.php' SQL Injection

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

CVE-2006-5049

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5049

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5049

Technical details for CVE-2006-5049 are not publicly available in the provided documents. No specifics on affected versions, impact, or remediation are given; monitor for updates for any substantive information.

CVE-2006-3599

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

CVE-2006-3494

Multiple cross-site scripting XSS vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the 1 catid parameter to a viewclassifieds.php; 2 id parameter in b viewad.php; 3 eventid parameter in c viewevent.php, d deleteevent.php, and e editevent.php;...

moduleSQL.txt

================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /modules.php?name=Classifieds&op=EditAds&idads=SQL ================================ Email:[email protected]...

Buddy Zone Version 1.0.1 - XSS

Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...

CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3329

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3330

The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...