CVE-2006-0719

The provided data confirms a SQL injection vulnerability in PHP Classifieds, affecting versions 6.18–6.20. The flaw resides in member_login.php where the (1) username parameter (used for the E-mail address field) and (2) password parameter can be leveraged by remote attackers to execute arbitrary...

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...

DELTAScripts PHP Classifieds 6.20 - Member_Login.php SQL Injection

DELTAScripts PHP Classifieds 6.20 - MemberLogin.php SQL Injection source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

PHPClassifieds.txt

--------------------------------------------------------------------------- SQL injection in PHP Classifieds 6.20 --------------------------------------------------------------------------- Author: Audun Larsen audun dot larsen at lkonsult dot no Date: February 14, 2006 Affected software:...

DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromis...

CVE-2005-4312

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4312

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4312

The CVE-2005-4312 entry describes an SQL injection vulnerability in AlmondSoft Almond Classifieds 5.02, exploitable via the id parameter in index.php. The affected component is the web application’s index.php handling of id values, enabling remote attackers to inject SQL commands. CVSS2 context f...

AlmondSoft Products SQL inj.

AlmondSoft Products SQL inj. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/almondsoft-products-sql-inj.html vendor:http://www.almondsoft.com/ affected products: Almond Classifieds 5.02 and Pro edition,Standart edition,E-Commerce Edition. and...

LocazoList Classifieds 1.0 - SearchDB.asp Input Validation

LocazoList Classifieds 1.0 - SearchDB.asp Input Validation source: https://www.securityfocus.com/bid/15812/info LocazoList Classifieds is prone to an input validation vulnerability that allows cross-site scripting and SQL injection attacks. An attacker may leverage this issue to have arbitrary...

LocazoList Classifieds 1.0 - 'SearchDB.asp' Input Validation

source: https://www.securityfocus.com/bid/15812/info LocazoList Classifieds is prone to an input validation vulnerability that allows cross-site scripting and SQL injection attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user i...

CVE-2005-3741

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

CVE-2005-3741

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

CVE-2005-3741

CVE-2005-3741 affects Almond Classifieds, where improper password verification allows bypassing access restrictions. Descriptions across sources consistently state the issue as a password verification problem enabling unauthorized access. No specific affected versions or root-cause details beyond...

almondClassifieds.txt

A vulnerability discovered in Almond Classifeds http://www.almondsoft.com/alcl.html vulnerability is due omit check of password in "editform" user can edit any add in the classifieds if we post new add we can edit our add in the "editform" section there are 2 hidden fields: by changing the number...

noahSQLXSS.txt

Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...

CVE-2005-2980

Cross-site scripting XSS vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter...

CVE-2005-2979

SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid parameter...

CVE-2005-2979

CVE-2005-2979 describes a SQL injection in Noah’s classifieds (index.php) by manipulating the rollid parameter. Public documents identify Noah’s classifieds as the affected software and point to an underlying input handling flaw in index.php, enabling remote SQL command execution. The NVD entry l...

CVE-2005-2980

The CVE-2005-2980 issue is an XSS vulnerability in Noah’s Classifieds v1.3, specifically in index.php where the rollid parameter can be exploited to inject arbitrary web script/HTML. The connected PT-2005-3817 entry confirms the vulnerable software and parameters, and notes that remote attackers ...