45 matches found
CVE-2007-3355
Technical details about CVE-2007-3355 are not publicly provided in the supplied documents. The entries repeat generic XSS vulnerability in NetClassifieds Premium Edition without specifics on affected versions, vectors, or fixes. Monitor for updates.
CVE-2007-3357
NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...
CVE-2007-3357
CVE-2007-3357 affects NetClassifieds Premium Edition. The vulnerability is a design/logic flaw where stored passwords and other sensitive data are not encrypted, creating potential information disclosure via unspecified vectors. The NVD entry assigns a base score of 10.0 (HIGH) with network attac...
CVE-2007-3354
CVE-2007-3354 relates to multiple SQL injection vulnerabilities in NetClassifieds Premium Edition. The NVD entry states remote attackers can execute arbitrary SQL via the s_user_id parameter to ViewCat.php and other unspecified vectors. The entry also notes that certain CatID/ViewCat.php, CatID/g...
CVE-2007-3354
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...
CVE-2007-3356
NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...
NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== NetClassifieds SQL/XSS/Full Path Multiple Remote Vulnerabilities ================================================================== Application: NetClassifieds: -Free Editi...
NetClassifieds - SQL Injection Cross-Site Scripting Full Path
NetClassifieds - SQL Injection Cross-Site Scripting Full Path Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix...
CVE-2007-3357: Undefined Security Weakness
NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...
NetClassifieds [multiple vulnerabilities]
Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
CVE-2007-3356: Undefined Security Weakness
NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...
CVE-2007-3354: Undefined Security Weakness
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...
NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path
Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
CVE-2007-3355: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities
NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/24584/info NetClassifieds is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These vulnerabilities include multiple...
NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/24584/info NetClassifieds is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues and cross-site scripting issues. A successful exploi...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...
CVE-2005-3978: Undefined Security Weakness
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...