12 matches found
EUVD-2003-1135
Malware in sbrugna...
OpenAutoClassifieds 1.0 Listing Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8972/info It has been reported that OpenAutoClassifieds is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'listings' parameter...
OpenAutoClassifieds <= 1.5.9 SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...
OpenAuto 1.6.3 Multiple Vulnerabilities
Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...
OpenAutoClassifieds 1.5.9 - SQL Injection
OpenAutoClassifieds 1.5.9 - SQL Injection source: https://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow a...
OpenAutoClassifieds 1.5.9 - SQL Injection
source: https://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...
CVE-2003-1145
Cross-site scripting XSS vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter...
CVE-2003-1145
CVE-2003-1145 describes a Cross-site scripting (XSS) vulnerability in OpenAutoClassifieds 1.0, specifically in the friendmail.php script. The flaw allows remote attackers to inject arbitrary web script or HTML by manipulating the listing parameter. Public references and CVE records corroborate th...
OpenAutoClassifieds XSS attack
Critical: Less critical Impact: Cross Site Scripting Where: From remote Software: OpenAutoClassifieds 1.x Vendor: http://jonroig.com/freecode/openautoclassifieds/ Description: A vulnerability has been identified in OpenAutoClassifieds, which can be exploited by malicious people to conduct...
[UNIX] OpenAutoClassifieds Cross-Site Scripting Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
OpenAutoClassifieds 1.0 - 'Listing' Cross-Site Scripting
source: https://www.securityfocus.com/bid/8972/info It has been reported that OpenAutoClassifieds is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'listings' parameter. The problem may allow a remote...
CVE-2003-1145
Cross-site scripting XSS vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter...