[MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Silurus Classifieds System (category.php) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability category.php ID Silurus Classifieds System http://snowhall.com/silurus AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Silurus Classifieds System - 'category.php' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability category.php ID Silurus Classifieds System http://snowhall.com/silurus AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Tukanas Classifieds 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Open Auto Classifieds <= 1.5.9 Multiple Remote Vulnerabilities

No description provided by source. MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security...

Open Auto Classifieds 1.5.9 File Upload

!/bin/bash File Upload exploit for Open Auto Classifieds version " echo "File upload proof of concept exploit for Open Auto Classifieds " evilimage.jpg.php echo "Registering user" curl -c cookiejar -d...

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title...

Open Auto Classifieds 1.5.9 SQL Injection

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Open Auto Classifieds <= 1.5.9 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Open Auto Classifieds = 1.5.9 Multiple Remote Vulnerabilities ============================================================== MorningStar Security - Advisory...

CVE-2008-7080

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql...

Improper access control

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql...

CVE-2008-7080

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql...

CVE-2008-7080

The CVE refers to CVE-2008-7080 in Team PHP PHP Classifieds Script, where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to obtain database credentials via a direct request to admin/backup/datadump.sql. The NVD entry lists a medium severity...

CVE-2008-7041

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php...

Authentication flaw

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php...

CVE-2008-7041

CVE-2008-7041 affects AJ Classifieds, where a remote attacker can bypass authentication by issuing a direct request to admin/home.php , potentially gaining administrator privileges. The connected documents provide the authentication bypass but do not disclose the underlying root cause, affected s...

CVE-2008-7041

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php...

CVE-2009-2914

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-2914

Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...