CVE-2009-2914

The CVE-2009-2914 issue applies to XZero Community Classifieds (versions up to 4.97.8). It is a Cross-site Scripting (XSS) vulnerability in index.php that allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. The connected sources confirm the affected pr...

CVE-2009-2913

CVE-2009-2913 affects XZero Community Classifieds 4.97.8. A cross-site scripting (XSS) vulnerability exists in index.php that allows remote attackers to inject arbitrary script/HTML via the URI. According to NVD, impact is partial integrity impact with no confidentiality or availability impact; e...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...

CVE-2009-2893

CVE-2009-2893 affects XZero Community Classifieds 4.97.8. The vulnerability is a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary script or HTML via (1) the postevent parameter in a post action, or (2) the _xzcal_y parameter. The public descriptions id...

CVE-2009-2893

Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...

CVE-2009-2780

Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2780

CVE-2009-2780 affects 68 Classifieds 4.1. Multiple cross-site scripting (XSS) vulnerabilities exist that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) cat in category.php, (2) view in login.php, (3) view in viewlisting.php, (4) page in searchresul...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2785

CVE-2009-2785 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the PHP Open Classifieds Script. The documented vectors are (1) the page parameter to buy.php and (2) the id parameter to contact.php and tellafriend.php, enabling remote attackers to inject arbitrary web scri...

Unrestricted file upload

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System aka Real Estate Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in...

Unrestricted file upload

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in carsimages/...

CVE-2008-6942

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System aka Real Estate Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in...

CVE-2008-6944

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in carsimages/...

CVE-2008-6942

CVE-2008-6942 affects the ScriptsFeed Realtor Classifieds System (Real Estate Classifieds). The vulnerability is an unrestricted file upload in the user profile logo feature, where an authenticated user can upload a file with an executable extension to the re_images/ path and access it via a dire...

CVE-2008-6944

CVE-2008-6944 describes an unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds. Remote authenticated users could upload a file with an executable extension as a profile logo and then access it directly via cars_images/ to execute arbitrary code. The issue is caused by improper ...

Unrestricted file upload

Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in classifieds1/yellowimages/...

Unrestricted file upload

Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in cars/carsimages/...