CVE-2017-17111

CVE-2017-17111 affects Posty Readymade Classifieds Script 1.0. Affected component: listings.php (catid parameter) and ads-details.php (ID parameter). Root cause: SQL injection due to insufficient input validation/sanitization in those endpoints, enabling an attacker to inject SQL commands via the...

PT-2017-14717

Name of the Vulnerable Software and Affected Versions Posty Readymade Classifieds Script version 1.0 Description The issue allows an attacker to inject SQL commands via specific requests, such as "listings.php?catid=" or "ads-details.php?ID=". This could potentially lead to unauthorized access or...

CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...

Readymade Classifieds Script 1.0 - SQL Injection

Readymade Classifieds Script 1.0 - SQL Injection Exploit Title: Readymade Classifieds Script 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.posty.in/index.html Demo: http://www.posty.in/readymade-classifieds-demo.html Version: 1.0...

E-PHP B2B Marketplace Multiple Vulns

No description provided by source. / Name : E-PHP B2B Marketplace Multiple Vulns WebSite : http://www.ephpscripts.com/b2b-trading-portal.php Price : 150 USD Author : Hamza 'MizoZ' N. Email : [email protected] / XSS - genconfirm.php shows the error message of $GET'errmsg' , but it's not protected...

Re-Script 0.99 Beta (listings.php op) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Sql injection

Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the 1 lstid parameter to listings.php or 2 infoid parameter to index.php...

PT-2012-5889

Name of the Vulnerable Software and Affected Versions EasyWebRealEstate affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the lstid parameter to "listings.php" or the infoid parameter to "index.php"...

CVE-2012-5290: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the 1 lstid parameter to listings.php or 2 infoid parameter to index.php...

PT-2012-5286

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software version 2012 Q2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the link idd parameter to "1 mobile/listings.php" or the userid parameter to "1...

E-PHP B2B Marketplace XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= E-PHP B2B Marketplace XSS / SQL Injection Vulnerability ======================================================= / Name : E-PHP B2B Marketplace Multiple Vulns WebSite :...

Re-Script 0.99 Beta SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Re-Script v.0.99 Beta ( listings.php op ) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Re-Script 0.99 Beta - 'listings.php?op' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Open Auto Classifieds 1.5.9 SQL Injection

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

CVE-2008-6656: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to listings.php and 2 the username field to login.php...

Sql injection

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

CVE-2008-4458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...