CVE-2006-3329

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

CVE-2006-3329

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3330

The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...

CVE-2006-3330: Undefined Security Weakness

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3329: Undefined Security Weakness

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

The CVE-2006-3088 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Car Classifieds that allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. The vulnerability is triggered through a crafted make_id value, enabling script execution in ...

CVE-2006-3088: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CEScripts (Multiple Scripts) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

Sql injection

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-2858

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-2858

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-2858

The vulnerability CVE-2006-2858 affects LocazoList Classifieds 1.05e, with the issue located in viewmsg.asp. The underlying flaw is an SQL injection via the msgid parameter that allows remote attackers to execute arbitrary SQL commands. The available sources confirm the presence of this SQL injec...

CVE-2006-2858: Undefined Security Weakness

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

locazolist.txt

Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...

LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability

Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...