Lucene search
+L

45 matches found

CVE
CVE
•added 2007/06/22 6:00 p.m.•60 views

CVE-2007-3355

Technical details about CVE-2007-3355 are not publicly provided in the supplied documents. The entries repeat generic XSS vulnerability in NetClassifieds Premium Edition without specifics on affected versions, vectors, or fixes. Monitor for updates.

4.3CVSS5.8AI score0.0106EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2007/06/22 6:00 p.m.•31 views

CVE-2007-3357

NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...

6AI score0.01062EPSS
SaveExploits0References4
CVE
CVE
•added 2007/06/22 6:00 p.m.•55 views

CVE-2007-3357

CVE-2007-3357 affects NetClassifieds Premium Edition. The vulnerability is a design/logic flaw where stored passwords and other sensitive data are not encrypted, creating potential information disclosure via unspecified vectors. The NVD entry assigns a base score of 10.0 (HIGH) with network attac...

10CVSS6AI score0.01062EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2007/06/22 6:00 p.m.•54 views

CVE-2007-3354

CVE-2007-3354 relates to multiple SQL injection vulnerabilities in NetClassifieds Premium Edition. The NVD entry states remote attackers can execute arbitrary SQL via the s_user_id parameter to ViewCat.php and other unspecified vectors. The entry also notes that certain CatID/ViewCat.php, CatID/g...

7.5CVSS8.4AI score0.02109EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2007/06/22 6:00 p.m.•48 views

CVE-2007-3354

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...

8.3AI score0.02109EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2007/06/22 6:00 p.m.•31 views

CVE-2007-3356

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...

6.2AI score0.01813EPSS
SaveExploits0References8
zdt
zdt
•added 2007/06/22 12:00 a.m.•41 views

NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== NetClassifieds SQL/XSS/Full Path Multiple Remote Vulnerabilities ================================================================== Application: NetClassifieds: -Free Editi...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/06/22 12:00 a.m.•30 views

NetClassifieds - SQL Injection Cross-Site Scripting Full Path

NetClassifieds - SQL Injection Cross-Site Scripting Full Path Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix...

0.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/22 12:00 a.m.•5 views

CVE-2007-3357: Undefined Security Weakness

NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...

10CVSS5.8AI score0.01062EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/06/22 12:00 a.m.•41 views

NetClassifieds [multiple vulnerabilities]

Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/22 12:00 a.m.•3 views

CVE-2007-3356: Undefined Security Weakness

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...

7.8CVSS6AI score0.01813EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/22 12:00 a.m.•5 views

CVE-2007-3354: Undefined Security Weakness

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...

7.5CVSS6.4AI score0.02109EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 2007/06/22 12:00 a.m.•43 views

NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path

Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

7.5CVSS5.8AI score0.02729EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/22 12:00 a.m.•4 views

CVE-2007-3355: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.0106EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2007/06/21 12:00 a.m.•13 views

NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities

NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/24584/info NetClassifieds is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These vulnerabilities include multiple...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/06/21 12:00 a.m.•25 views

NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/24584/info NetClassifieds is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues and cross-site scripting issues. A successful exploi...

7.5CVSS5.8AI score0.02109EPSS
SaveExploits1
NVD
NVD
•added 2005/12/03 7:03 p.m.•27 views

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...

7.5CVSS8.4AI score0.02729EPSS
SaveExploits4References7
CVE
CVE
•added 2005/12/03 7:00 p.m.•55 views

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...

7.5CVSS8.5AI score0.02729EPSS
SaveExploits4References7Affected Software1
Cvelist
Cvelist
•added 2005/12/03 7:00 p.m.•34 views

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...

8.4AI score0.02729EPSS
SaveExploits4References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/03 12:00 a.m.•5 views

CVE-2005-3978: Undefined Security Weakness

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...

7.5CVSS6.4AI score0.02729EPSS
SaveExploits4References1
Rows per page
Query Builder