EUVD-2012-5702

Malware in sbrugna...

CVE-2012-5823

Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...

Open Source Classifieds 1.1.0 - Alpha (OSClassi) Multiple Vulnerabilities

No description provided by source. / / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/ ======================================================================================== Open Source Classifieds OSClassi SQLi/Xss/Arbitrary Admin Change...

CVE-2012-5823

Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...

Design/Logic Flaw

Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...

CVE-2012-5823

Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...

CVE-2012-5823

The CVE-2012-5823 issue affects Open Source Classifieds. It describes a failure to verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling man-in-the-middle attacks by spoofing SSL servers with arbitrary valid certificates, related to the PHP fsockopen fun...

CVE-2012-5823: Improper Input Validation

Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...

PT-2012-6135

Name of the Vulnerable Software and Affected Versions Open Source Classifieds affected versions not specified Description The issue is related to the verification of server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This lack...

Open Source Classifieds 1.1.0 Alpha Cross Site Scripting / SQL Injection

/ / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/ ======================================================================================== Open Source Classifieds OSClassi SQLi/Xss Multi Vulnerabilities...

Open Source Classifieds v1.1.0 Alpha (OSClassi) Mult Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Open Source Classifieds v1.1.0 Alpha OSClassi Mult Vulnerabilities ==================================================================== / / / | | \ | |/ | ' \ / | / / / |...

Open Source Classifieds 1.1.0 Alpha (OSClassi) - SQL Injection Cross-Site Scripting Arbitrary Admin Change

Open Source Classifieds 1.1.0 Alpha OSClassi - SQL Injection Cross-Site Scripting Arbitrary Admin Change / / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/...