CVE-2008-1838

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

CVE-2008-1838

The connected data shows a related CVE (CVE-2008-6526) describing a SQL injection in BosDev BosClassifieds: index.php via the cat_id parameter, a vector different from CVE-2008-1838’s cat parameter. This confirms that BosClassifieds 3.0 stores user-supplied input in a way exploitable through SQL,...

CVE-2008-1838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

BosClassifieds 3.0 - index.php SQL Injection

BosClassifieds 3.0 - index.php SQL Injection !R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, No...

Cross site scripting

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1224

CVE-2008-1224 is an XSS vulnerability affecting the BosClassifieds Classified Ads System 3.0, specifically in the account.php script where user-supplied input in the returnTo parameter can be used to inject arbitrary web script or HTML. The issue is described as a cross-site scripting flaw that c...

CVE-2008-1224

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...