1504 matches found
PHP Classifieds 7.1 - 'index.php' SQL Injection
---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...
PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability
---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...
CVE-2006-5049
Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...
CVE-2006-5049
Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...
CVE-2006-5049
Technical details for CVE-2006-5049 are not publicly available in the provided documents. No specifics on affected versions, impact, or remediation are given; monitor for updates for any substantive information.
CVE-2006-3599
SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...
CVE-2006-3494
Multiple cross-site scripting XSS vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the 1 catid parameter to a viewclassifieds.php; 2 id parameter in b viewad.php; 3 eventid parameter in c viewevent.php, d deleteevent.php, and e editevent.php;...
moduleSQL.txt
================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /modules.php?name=Classifieds&op=EditAds&idads=SQL ================================ Email:[email protected]...
Buddy Zone Version 1.0.1 - XSS
Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...
CVE-2006-3329
SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...
CVE-2006-3330
Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...
CVE-2006-3330
The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...
CVE-2006-3330
Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...
CVE-2006-3329
The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...
CVE-2006-3329
SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...
CVE-2006-3088
Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3088
Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3088
The CVE-2006-3088 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Car Classifieds that allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. The vulnerability is triggered through a crafted make_id value, enabling script execution in ...
CEScripts (Multiple Scripts) - Cross-Site Scripting
source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...