Lucene search
+L

1504 matches found

securityvulns
securityvulns
added 2006/02/24 12:00 a.m.38 views

[KAPDA::#29]Noah's classifieds multiple vulnerabilities

KAPDA New advisory Vendor: http://classifieds.phpoutsourcing.com Vulnerable: Noahs classifieds 1.3 and below classifieds component for mambo also may be affected Bug: Path Disclosure,Sql Injection,XSS,Local file inclusion,Remote code execution Exploitation: Remote with browser Exploit:available...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/02/23 12:00 a.m.35 views

Noah's Classifieds <= 1.3 Multiple Vulnerabilities

The remote host is running Noah's Classifieds, a classified ads application written in PHP. The installed version of Noah's Classifieds is reportedly affected by numerous remote and local file include, SQL injection, cross-site scripting, and information disclosure issues due to a general failure...

7.5CVSS5.6AI score0.07652EPSS
SaveExploits8References5
seebug.org
seebug.org
added 2006/02/22 12:00 a.m.23 views

Noahs Classifieds &lt;= 1.3 (lowerTemplate) Remote Code Execution

No description provided by source. ?php Noah's classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute http://www.KAPDA.ir Functions From rgod Condition:registerglobals=On errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 5; obimplicitflu...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/22 12:00 a.m.39 views

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

7.5CVSS5.8AI score0.0128EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2006/02/22 12:00 a.m.40 views

Noahs Classifieds 1.3 - 'lowerTemplate' Remote Code Execution

Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA font colo...

5.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/22 12:00 a.m.19 views

Noah's Classifieds 1.0/1.3 - Local File Inclusion

source: https://www.securityfocus.com/bid/16778/info Noah's Classifieds is prone to a local file-include vulnerability. This may facilitate the unauthorized viewing of files and unauthorized execution of local scripts. Version 1.3.0 is vulnerable; other versions may be affected as well...

5CVSS5.8AI score0.02818EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/02/22 12:00 a.m.19 views

Noahs Classifieds 1.01.3 - index.php Remote File Inclusion

Noahs Classifieds 1.01.3 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/16780/info Noah's Classifieds is prone to a remote file-include vulnerability. An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process...

0.9AI score
SaveExploits0
zdt
zdt
added 2006/02/22 12:00 a.m.57 views

Noahs Classifieds <= 1.3 (lowerTemplate) Remote Code Execution

Exploit for unknown platform in category web applications ============================================================== Noahs Classifieds Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA table...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/22 12:00 a.m.27 views

Noahs Classifieds 1.3 - lowerTemplate Remote Code Execution

Noahs Classifieds 1.3 - lowerTemplate Remote Code Execution Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/22 12:00 a.m.22 views

Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16772/info Noah's Classifieds is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

4.3CVSS5.8AI score0.01911EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2006/02/22 12:00 a.m.30 views

Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16780/info Noah's Classifieds is prone to a remote file-include vulnerability. An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the...

7.5CVSS5.8AI score0.07652EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/02/22 12:00 a.m.15 views

Noahs Classifieds 1.01.3 - Local File Inclusion

Noahs Classifieds 1.01.3 - Local File Inclusion source: https://www.securityfocus.com/bid/16778/info Noah's Classifieds is prone to a local file-include vulnerability. This may facilitate the unauthorized viewing of files and unauthorized execution of local scripts. Version 1.3.0 is vulnerable;...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/22 12:00 a.m.17 views

Noahs Classifieds 1.01.3 - index.php Multiple Cross-Site Scripting Vulnerabilities

Noahs Classifieds 1.01.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16772/info Noah's Classifieds is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

7AI score
SaveExploits0
NVD
NVD
added 2006/02/15 10:06 p.m.18 views

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...

7.5CVSS8.6AI score0.01274EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2006/02/15 10:00 p.m.28 views

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...

8.6AI score0.01274EPSS
SaveExploits2References6
CVE
CVE
added 2006/02/15 10:00 p.m.55 views

CVE-2006-0719

The provided data confirms a SQL injection vulnerability in PHP Classifieds, affecting versions 6.18–6.20. The flaw resides in member_login.php where the (1) username parameter (used for the E-mail address field) and (2) password parameter can be leveraged by remote attackers to execute arbitrary...

7.5CVSS8.6AI score0.01274EPSS
SaveExploits2References6Affected Software1
Packet Storm
Packet Storm
added 2006/02/14 12:00 a.m.40 views

PHPClassifieds.txt

--------------------------------------------------------------------------- SQL injection in PHP Classifieds 6.20 --------------------------------------------------------------------------- Author: Audun Larsen audun dot larsen at lkonsult dot no Date: February 14, 2006 Affected software:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/14 12:00 a.m.28 views

DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromis...

7.5CVSS5.8AI score0.01274EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/02/14 12:00 a.m.19 views

DELTAScripts PHP Classifieds 6.20 - Member_Login.php SQL Injection

DELTAScripts PHP Classifieds 6.20 - MemberLogin.php SQL Injection source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

1AI score
SaveExploits0
NVD
NVD
added 2005/12/17 12:03 a.m.14 views

CVE-2005-4312

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01211EPSS
SaveExploits0References5
Rows per page
Query Builder