CVE-2008-6543

CVE-2008-6543 affects ComScripts TEAM Quick Classifieds 1.0. It describes multiple PHP remote file inclusion vulnerabilities triggered via the DOCUMENT_ROOT parameter across numerous scripts (e.g., index.php3, locate.php3, search_results.php3, classifieds/, controlpannel/ , include/*.php3, and po...

Simply Classified 0.2 SQL Injection

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

[SA34410] PHP Classifieds Cross-Site Scripting and File Upload Vulnerabilities

---------------------------------------------------------------------- Secunia is pleased to announce the release of the annual Secunia report for 2008. Highlights from the 2008 report: Vulnerability Research Software Inspection Results Secunia Research Highlights Secunia Advisory Statistics...

TurnkeyForms Local Classifieds 'Site_Admin/admin.php' Authentication Bypass Vulnerability

TurnkeyForms Local Classifieds is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain administrative access to the affected application. OpenVAS Vulnerability Test $Id: TurnkeyFormsclassifiedsauthenticationbypass.nasl 5770 2017-03-29 14:34:03Z cfi $...

TurnkeyForms Local Classifieds Authentication Bypass Vulnerability (Mar 2009) - Active Check

TurnkeyForms Local Classifieds is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2008-6351

Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-6350

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

Sql injection

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2008-6351

Summary (CVE-2008-6351) : A cross-site scripting (XSS) vulnerability affects TurnkeyForms Local Classifieds in the file listtest.php , exploitable via the r parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The provided documents do not specify affected versions...

CVE-2008-6350

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2008-6350

CVE-2008-6350 defines an SQL injection vulnerability in listtest.php of TurnkeyForms Local Classifieds. The flaw allows remote attackers to inject SQL via the r parameter and execute arbitrary commands, with a CVSS2 base score of 7.5 (HIGH) and network/low complexity conditions. Affected componen...

CVE-2008-6351

Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

CVE-2008-6325 concerns Softbiz Classifieds Script. The connected documents confirm multiple XSS vulnerabilities affecting the product, including vectors in showcategory.php (radio parameter), advertisers/signinform.php (msg parameter), gallery.php (radio), lostpassword.php (msg), and admin pages ...

CVE-2008-6302

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...

CVE-2008-6306

Cross-site scripting XSS vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6306

CVE-2008-6306 describes a cross-site scripting (XSS) vulnerability in Softbiz Classifieds Script, specifically in signinform.php, exploitable via the msg parameter to inject arbitrary web script/HTML. The note indicates the provenance is unknown and details come from third-party information. Conn...