CVE-2009-3227

Cross-site scripting XSS vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from thir...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from thir...

CVE-2009-3224

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2009-3225

Multiple cross-site scripting XSS vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter in a browse action to index.php or 2 the addr parameter to...

CVE-2009-3226

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manwrepl addform action. NOTE: some of these details are obtained from third...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter in a browse action to index.php or 2 the addr parameter to...

Sql injection

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manwrepl addform action. NOTE: some of these details are obtained from third...

CVE-2009-3227

Cross-site scripting XSS vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from thir...

CVE-2009-3227

The CVE-2009-3227 entry documents a Cross-site scripting (XSS) vulnerability in index.php of AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds. The issue permits remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. ...

CVE-2009-3224

CVE-2009-3224 describes an SQL injection in the web app component: the file index.php of the Super Mod System when used with the 68 Classifieds 3.1 Core System . The vulnerability allows remote attackers to execute arbitrary SQL commands through the s parameter, enabling potential data disclosure...

CVE-2009-3224

SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2009-3225

Multiple cross-site scripting XSS vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter in a browse action to index.php or 2 the addr parameter to...

CVE-2009-3226

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manwrepl addform action. NOTE: some of these details are obtained from third...

CVE-2009-3226

Summary of CVE-2009-3226 : A SQL injection exists in index.php of AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds via the replid parameter in a manw_repl add_form action. Remote attackers can potentially execute arbitrary SQL commands. The connected documents...

CVE-2009-3225

CVE-2009-3225 affects AlmondSoft Almond Classifieds Wap and Pro (and possibly Almond Affiliate Network Classifieds). The issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script/HTML via (1) the page parameter in a browse action to index.php and (2) the add...

Cross site scripting

Cross-site scripting XSS vulnerability in gmap.php in the Almond Classifieds comaclassf component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter...

CVE-2009-3154

SQL injection vulnerability in the Almond Classifieds comaclassf component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manwrepl addform action to index.php, a different vector than CVE-2009-2567...

CVE-2009-3155

Cross-site scripting XSS vulnerability in gmap.php in the Almond Classifieds comaclassf component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter...

Sql injection

SQL injection vulnerability in the Almond Classifieds comaclassf component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manwrepl addform action to index.php, a different vector than CVE-2009-2567...

CVE-2009-3154

The provided details identify CVE-2009-3154 as a SQL injection in the Joomla! Almond Classifieds extension (com_aclassf) version 7.5. The vulnerability is exploitable via the replid parameter in a manw_repl add_form action to index.php, enabling remote execution of arbitrary SQL commands. The con...