Cross-site Request Forgery (CSRF) in Open Classifieds

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Open Classifieds which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Open Classifieds The vulnerability exists due to insufficient validation of the request origin in...

CVE-2010-3427

Multiple cross-site scripting XSS vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 desc, 2 price, 3 title, and 4 place parameters to index.php and the 5 subject parameter to contact.htm, related to content/contact.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 desc, 2 price, 3 title, and 4 place parameters to index.php and the 5 subject parameter to contact.htm, related to content/contact.php...

CVE-2010-3427

Open Classifieds 1.7.0.2 is affected by multiple reflected cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) desc, (2) price, (3) title, and (4) place to index.php, and (5) subject to contact.htm (related to...

CVE-2010-3427

Multiple cross-site scripting XSS vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 desc, 2 price, 3 title, and 4 place parameters to index.php and the 5 subject parameter to contact.htm, related to content/contact.php...

CVE-2010-3427: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 desc, 2 price, 3 title, and 4 place parameters to index.php and the 5 subject parameter to contact.htm, related to content/contact.php...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2785

CVE-2009-2785 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the PHP Open Classifieds Script. The documented vectors are (1) the page parameter to buy.php and (2) the id parameter to contact.php and tellafriend.php, enabling remote attackers to inject arbitrary web scri...

CVE-2009-2785: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...