CVE-2006-6929

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

CVE-2006-6930

Rapid Classified 3.1 is affected by an SQL injection in viewad.asp via the id parameter, enabling remote execution of arbitrary SQL commands. Root cause: improper handling of the id input in viewad.asp. Affected component: Rapid Classified 3.1 (viewad.asp). Impact: arbitrary SQL execution with pa...

CVE-2006-6930

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2007-1210 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "viewad.asp" file. Recommendations: For Rapid Classified version 3.1, consider...

CVE-2006-6930: Undefined Security Weakness

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6929: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

PT-2007-1209 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters in different scripts,...

rapidclassified31.txt

vendor site: http://www.4u2ges.com/ product : Rapid Classified v3.1 bug: multiple xss get & injection sql risk : medium injection sql : /viewad.asp?id='sql xss : /reply.asp?id=xss /viewprint.asp?id=xss /search.asp?categoryName=1&SH1=xss /reply.asp?id=50120815480100001&name=xss...

Rapid Classified 3.1 - advsearch.asp Cross-Site Scripting

Rapid Classified 3.1 - advsearch.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly saniti...

Rapid Classified 3.1 - viewad.asp SQL Injection

Rapid Classified 3.1 - viewad.asp SQL Injection source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize...

Rapid Classified 3.1 - search.asp Cross-Site Scripting

Rapid Classified 3.1 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize...

Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Rapid Classified 3.1 - 'viewad.asp' SQL Injection

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Rapid Classified 3.1 - 'advsearch.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...