CVE-2014-2024

The CVE-2014-2024 issue is a real XSS in Open Classifieds 2.x (pre-2.1.3), caused by insufficient sanitisation of user data in the URI to /shared-apartments-rooms/. Open Classifieds 2-2.1.2 (and prior) are affected; a crafted link can execute arbitrary HTML/script in the context of a logged-in us...

Open Classifieds 2-2.1.2 Cross Site Scripting Vulnerability

Open Classifieds version 2-2.1.2 suffers from a cross site scripting vulnerability. Product: Open Classifieds Vendor: Open Classifieds Team Vulnerable Versions: 2-2.1.2 and probably prior Tested Version: 2-2.1.2 Advisory Publication: February 19, 2014 without technical details Vendor Notification...

Open Classifieds跨站脚本漏洞

CVE ID：CVE-2014-2024 Open Classifieds可以用来创建分类和目录。 由于没有充分过滤通过URI传递到"/shared-apartments-rooms/" URL的用户提供的数据，远程攻击者可以利用漏洞欺骗登录用户访问恶意链接，并在受影响网站上下文的浏览器中执行任意HTML和脚本代码。 0 Open Classifieds 2-2.1.2 厂商补丁： Open Classifieds ----- Open Classifieds 2-2.1.3版本以修复此漏洞，建议用户下载使用：...

Open Classifieds 2-2.1.2 Cross Site Scripting

Advisory ID: HTB23204 Product: Open Classifieds Vendor: Open Classifieds Team Vulnerable Versions: 2-2.1.2 and probably prior Tested Version: 2-2.1.2 Advisory Publication: February 19, 2014 without technical details Vendor Notification: February 19, 2014 Vendor Patch: February 20, 2014 Public...

Cross-Site Scripting (XSS) in Open Classifieds

High-Tech Bridge Security Research Lab discovered vulnerability in Open Classifieds, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in Open Classifieds: CVE-2014-2024 The vulnerability exists due to insufficient sanitisation of user-supplied data...

Auto Classifieds Script 2.0添加管理员CSRF漏洞

No description provided by source. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Auto Classifieds Script 2.0 - Add Admin CSRF Vulnerability

Auto Classifieds Script version 2.0 suffers from a cross site request forgery vulnerability. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...

Auto Classifieds Script 2.0 Cross Site Request Forgery

Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/auto-classifieds-script/ .:. Test...

Joomla! Component Almond Classifieds - Arbitrary File Upload

Joomla! Component Almond Classifieds - Arbitrary File Upload source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately saniti...

Joomla! Component Almond Classifieds - Arbitrary File Upload

source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue t...

CVE-2013-7216

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216

CVE-2013-7216 : Classifieds Creator 2.0 contains multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via (1) ID in demo/classifieds/product.asp or (2) UserID or (3) Password in demo/classifieds/admin.asp. Impact is described as remote command executi...

Classifieds Creator 2.0 SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: Multiple Vulnerabilities Vendor: http://www.etoshop.com/ + Software: Classifieds Creator + infection: Multiple Vulnerabilities Version :2.0 author: R3d-D3v!L + TEAM: ABH ? contact:...

Joomla DJ Classifieds Extension 2.0 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications $$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds...

Joomla DJ Classifieds Extension 2.0 SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds - Time-Based Blind SQL Injection Google Dork:...

Joomla! Component dj-classifieds 2.0 - Blind SQL Injection

Joomla! Component dj-classifieds 2.0 - Blind SQL Injection $$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ...

Joomla! Component dj-classifieds 2.0 - Blind SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds - Time-Based Blind SQL Injection Google Dork:...

Craigslist Gold - SQL Injection

Exploit Title: Craigslist Clone Gold SQL injection Vulnerability Date: 04/05/2013 Author: Fallaga Team: FaLLaGa Tunisian Hackers Script url: http://www.scriptcopy.com/craigslist-clone-script/Craiglist-Gold-4444.html Version: N/A Tested on: Demo CVE : EXPL0!T...