CVE-2006-0878

Noah's Classifieds 1.3 is affected by a path disclosure vulnerability in which remote attackers can obtain the installation path via a direct request to include files (example: classifieds/gorum/category.php). The root cause is a file inclusion/path traversal issue that exposes server paths. Vers...

CVE-2006-0879

CVE-2006-0879 describes an SQL injection vulnerability in the search tool of Noah’s Classifieds 1.3. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors. The NVD entry lists a high base score (7.5) with network attack vector and no authentica...

CVE-2006-0881

Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when registerglobals is enabled, allow remote attackers to include arbitrary PHP files via the 1 upperTemplate and 2 lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to...

CVE-2006-0882

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php...

CVE-2006-0880

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 inf parameter; or, when registerglobals is enabled, the 2 upperTemplate and 3 lowerTemplate parameters...

CVE-2006-0879

SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors...

[KAPDA::#29]Noah's classifieds multiple vulnerabilities

KAPDA New advisory Vendor: http://classifieds.phpoutsourcing.com Vulnerable: Noahs classifieds 1.3 and below classifieds component for mambo also may be affected Bug: Path Disclosure,Sql Injection,XSS,Local file inclusion,Remote code execution Exploitation: Remote with browser Exploit:available...

Noah's Classifieds <= 1.3 Multiple Vulnerabilities

The remote host is running Noah's Classifieds, a classified ads application written in PHP. The installed version of Noah's Classifieds is reportedly affected by numerous remote and local file include, SQL injection, cross-site scripting, and information disclosure issues due to a general failure...

Noahs Classifieds 1.01.3 - index.php Remote File Inclusion

Noahs Classifieds 1.01.3 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/16780/info Noah's Classifieds is prone to a remote file-include vulnerability. An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process...

Noahs Classifieds 1.3 - lowerTemplate Remote Code Execution

Noahs Classifieds 1.3 - lowerTemplate Remote Code Execution Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA...

Noahs Classifieds <= 1.3 (lowerTemplate) Remote Code Execution

Exploit for unknown platform in category web applications ============================================================== Noahs Classifieds Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA table...

Noahs Classifieds 1.01.3 - index.php Multiple Cross-Site Scripting Vulnerabilities

Noahs Classifieds 1.01.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16772/info Noah's Classifieds is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Noahs Classifieds 1.01.3 - Local File Inclusion

Noahs Classifieds 1.01.3 - Local File Inclusion source: https://www.securityfocus.com/bid/16778/info Noah's Classifieds is prone to a local file-include vulnerability. This may facilitate the unauthorized viewing of files and unauthorized execution of local scripts. Version 1.3.0 is vulnerable;...

Noahs Classifieds &lt;= 1.3 (lowerTemplate) Remote Code Execution

No description provided by source. ?php Noah's classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute http://www.KAPDA.ir Functions From rgod Condition:registerglobals=On errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 5; obimplicitflu...

Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16780/info Noah's Classifieds is prone to a remote file-include vulnerability. An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the...

Noahs Classifieds 1.3 - 'lowerTemplate' Remote Code Execution

Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA font colo...

Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16772/info Noah's Classifieds is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Noah's Classifieds 1.0/1.3 - Local File Inclusion

source: https://www.securityfocus.com/bid/16778/info Noah's Classifieds is prone to a local file-include vulnerability. This may facilitate the unauthorized viewing of files and unauthorized execution of local scripts. Version 1.3.0 is vulnerable; other versions may be affected as well...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...