CVE-2006-5293

CVE-2006-5293 affects PhpOutsourcing Noah’s Classifieds, prior to or including version 1.3, where index.php is vulnerable to cross-site scripting via the frommethod parameter. Affected component: index.php; vulnerability type: XSS. CVSS v2 base score 6.8 (Medium) with network attack vector, requi...

CVE-2006-5293: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...

NoahsClassifieds.txt

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : alert'XSS Vulnerable';" Advisory: http://zone14.free.fr/advisories/5/ --Raphael HUCK...

Noah's Classifieds Cross Site Scripting Vulnerability

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : html body form method="POST" enctype="multipart/form-data" action="http://www.example.com/classifieds/index.php" input...

CVE-2006-5208

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...

CVE-2006-5208

CVE-2006-5208 affects PHP Classifieds 7.1. It contains SQL injection vulnerabilities in two parameters: catid_search (search.php) and catid (index.php). The underlying issue is unsanitized input allowing remote attackers to execute arbitrary SQL commands. Reported impact is that an attacker can r...

CVE-2006-5208

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...

CVE-2006-5208: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...

PHP Classifieds 7.1 - 'index.php' SQL Injection

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHP Classifieds 7.1 index.php Remote SQL Injection Vulnerability ================================================================== ---- App Name: PHP Classifieds = 7.1 App...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

No description provided by source. ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql --...

PHP Classifieds 7.1 - index.php SQL Injection

PHP Classifieds 7.1 - index.php SQL Injection ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

CVE-2006-5049

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5049

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5049

Technical details for CVE-2006-5049 are not publicly available in the provided documents. No specifics on affected versions, impact, or remediation are given; monitor for updates for any substantive information.

CVE-2006-5049: Undefined Security Weakness

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-3599

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

CVE-2006-3599: Undefined Security Weakness

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

CVE-2006-3494

Multiple cross-site scripting XSS vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the 1 catid parameter to a viewclassifieds.php; 2 id parameter in b viewad.php; 3 eventid parameter in c viewevent.php, d deleteevent.php, and e editevent.php;...