PHP Classifieds 7.1 - 'index.php' SQL Injection

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

CVE-2006-2821 involves multiple cross‑site scripting (XSS) flaws in DeltaScripts Pro Publish. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) artid in art.php and (2) catname in cat.php. The cited sources describe XSS impact and ...

CVE-2006-2821: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

Pro Publish SQL Injection and XSS Vulnerabilities

--------------------------------------------- Pro Publish SQL Injection and XSS Vulnerabilities --------------------------------------------- Site: http://www.deltascripts.com/download/ Bug: 1. SQL Injection : http://victim/propublish/cat.php?catid=' 2. XSS : 1-...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2002-1702

CVE-2002-1702 is a cross-site scripting vulnerability in DeltaScripts PHP Classifieds 6.0.5 that allows remote attackers to execute arbitrary script as other users via the URL parameter. Documented impacts include potential integrity compromise with no confidentiality or availability impact per N...

CVE-2002-1702: Undefined Security Weakness

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...