CVE-2017-20136 Itech Classifieds Script subpage.php sql injection

A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function of the file /subpage.php. The manipulation of the argument scat with the input =51' AND 4941=4941 AND 'hoCP'='hoCP leads to sql injection. It is possible to launch the attack...

CVE-2017-20136

CVE-2017-20136 affects Itech Classifieds Script 7.27. The vulnerability exists in an unknown function within /subpage.php, where manipulating the parameter scat with input like 51' AND 4941=4941 AND 'hoCP'='hoCP leads to SQL injection. This can be exploited remotely and has been publicly disclose...

CVE-2017-20136 Itech Classifieds Script subpage.php sql injection

A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function of the file /subpage.php. The manipulation of the argument scat with the input =51' AND 4941=4941 AND 'hoCP'='hoCP leads to sql injection. It is possible to launch the attack...

Ambit Technologies iTech Classifieds Script SQL注入漏洞

Ambit Technologies iTech Classifieds Script is a popular and cost-effective solution from Ambit Technologies India for launching your classified ads website. Ambit Technologies iTech Classifieds Script version 7.27 suffers from a SQL injection vulnerability that stems from the presence of an...

mobilehomeclassifieds.com Cross Site Scripting vulnerability OBB-2653709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Advanced Classifieds & Directory Pro plugin < 1.8.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Advanced Classifieds & Directory Pro plugin versions 1.8.8. Solution Update the WordPress Advanced Classifieds & Directory Pro plugin to the latest available version at least 1.8.8...

WordPress Advanced Classifieds & Directory Pro plugin < 1.8.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advanced Classifieds & Directory Pro plugin versions 1.8.8. Solution Update the WordPress Advanced Classifieds & Directory Pro plugin to the latest available version at least 1.8.8...

classifieds.singaporeexpats.com Cross Site Scripting vulnerability OBB-2317770

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48546)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48545)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-48547)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-48548)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Sql injection

The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection...

CVE-2021-24285

CVE-2021-24285 concerns the WordPress plugin Car Seller - Auto Classifieds Script (versions ≤ 2.1.0). The vulnerability is a SQL injection in the request_list_request AJAX handler: the order_id parameter is not sanitised/validated/escaped before being interpolated into a SQL statement, and the en...

Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection

The requestlistrequest AJAX call of the plugin, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL Injection issue. curl 'https://example.com/wp-admin/admin-ajax.php' ...

lnpclassifieds.com Cross Site Scripting vulnerability OBB-1424038

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

canoncityclassifieds.com Cross Site Scripting vulnerability OBB-1402728

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

classifieds.thetowntalk.com Cross Site Scripting vulnerability OBB-1387768

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

classifieds.floridatoday.com Cross Site Scripting vulnerability OBB-1290344

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Stored Cross-Site Scripting Vulnerability in UX365 Web Classifieds Navigation System

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. A stored cross-site scripting vulnerability exists in the Uke365 Website Classifieds Navigation System. An attacker can exploit the vulnerability to obtain an...