CVE-2017-17111

CVE-2017-17111 affects Posty Readymade Classifieds Script 1.0. Affected component: listings.php (catid parameter) and ads-details.php (ID parameter). Root cause: SQL injection due to insufficient input validation/sanitization in those endpoints, enabling an attacker to inject SQL commands via the...

PT-2017-14717

Name of the Vulnerable Software and Affected Versions Posty Readymade Classifieds Script version 1.0 Description The issue allows an attacker to inject SQL commands via specific requests, such as "listings.php?catid=" or "ads-details.php?ID=". This could potentially lead to unauthorized access or...

CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...

Readymade Classifieds Script 1.0 - SQL Injection

Readymade Classifieds Script 1.0 - SQL Injection Exploit Title: Readymade Classifieds Script 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.posty.in/index.html Demo: http://www.posty.in/readymade-classifieds-demo.html Version: 1.0...