12 matches found
PT-2019-18609
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow...
PT-2019-18608
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected HTML injection, which occurs via the Search Form. This means that an attacker can inject malicious HTML code into the search form,...
PT-2019-18610
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...
CVE-2019-7437: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
CVE-2019-7436: Exposure of Sensitive Information to an Unauthorized Actor
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory...
PT-2017-14919
Name of the Vulnerable Software and Affected Versions Opensource Classified Ads Script version 3.2 Description The issue is related to SQL Injection, which occurs via the keyword parameter in the "advance result.php" endpoint. Recommendations For Opensource Classified Ads Script version 3.2,...
CVE-2017-17623: Improper Neutralization of Special Elements used in an SQL Command
Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...
Opensource Classified Ads Script 3.2 - SQL Injection
Opensource Classified Ads Script 3.2 - SQL Injection...
Opensource Classified Ads Script 3.2 - SQL Injection
...
Opensource Classified Ads Script - keyword Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Opensource Classified Ads Script - SQL Injection Google Dork: N/A Date: 29.03.2017 Vendor Homepage: http://www.2daybiz.com/ Software: http://www.professionalclassifiedscript.com/downloads/opensource-classified-ads-script-2/ Demo...
Opensource Classified Ads Script - keyword SQL Injection
Opensource Classified Ads Script - keyword SQL Injection Exploit Title: Opensource Classified Ads Script - SQL Injection Google Dork: N/A Date: 29.03.2017 Vendor Homepage: http://www.2daybiz.com/ Software: http://www.professionalclassifiedscript.com/downloads/opensource-classified-ads-script-2/...
Opensource Classified Ads Script - 'keyword' SQL Injection
Exploit Title: Opensource Classified Ads Script - SQL Injection Google Dork: N/A Date: 29.03.2017 Vendor Homepage: http://www.2daybiz.com/ Software: http://www.professionalclassifiedscript.com/downloads/opensource-classified-ads-script-2/ Demo: http://198.38.86.159/classic/ Version: N/A Tested on...