CVE-2006-3329

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

The CVE-2006-3088 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Car Classifieds that allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. The vulnerability is triggered through a crafted make_id value, enabling script execution in ...

CEScripts (Multiple Scripts) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

Sql injection

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-2858

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-2858

The vulnerability CVE-2006-2858 affects LocazoList Classifieds 1.05e, with the issue located in viewmsg.asp. The underlying flaw is an SQL injection via the msgid parameter that allows remote attackers to execute arbitrary SQL commands. The available sources confirm the presence of this SQL injec...

CVE-2006-2858

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

locazolist.txt

Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...

LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability

Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...

Cross site scripting

Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2006-1970

Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2006-1970

Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2006-1970

CVE-2006-1970 denotes a cross-site scripting (XSS) vulnerability in the classifieds/viewcat.cgi component of KCScripts Classifieds, distributed standalone and as part of Portal Pack 6.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter....

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...

CVE-2006-1532

CVE-2006-1532 is a cross-site scripting (XSS) vulnerability in the PHP Classifieds product, affecting versions 6.18 and 6.20 (and possibly other versions). The flaw resides in the search.php handler where the searchword parameter can be exploited by remote attackers to inject arbitrary web script...

CVE-2006-1532

Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...

Design/Logic Flaw

Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...