CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...

CVE-2006-1532

Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...

CVE-2006-1532

CVE-2006-1532 is a cross-site scripting (XSS) vulnerability in the PHP Classifieds product, affecting versions 6.18 and 6.20 (and possibly other versions). The flaw resides in the search.php handler where the searchword parameter can be exploited by remote attackers to inject arbitrary web script...

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...

CVE-2006-0719

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...

CVE-2006-0719

The provided data confirms a SQL injection vulnerability in PHP Classifieds, affecting versions 6.18–6.20. The flaw resides in member_login.php where the (1) username parameter (used for the E-mail address field) and (2) password parameter can be leveraged by remote attackers to execute arbitrary...

PHPClassifieds.txt

--------------------------------------------------------------------------- SQL injection in PHP Classifieds 6.20 --------------------------------------------------------------------------- Author: Audun Larsen audun dot larsen at lkonsult dot no Date: February 14, 2006 Affected software:...

DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromis...

DELTAScripts PHP Classifieds 6.20 - Member_Login.php SQL Injection

DELTAScripts PHP Classifieds 6.20 - MemberLogin.php SQL Injection source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2002-1702

CVE-2002-1702 is a cross-site scripting vulnerability in DeltaScripts PHP Classifieds 6.0.5 that allows remote attackers to execute arbitrary script as other users via the URL parameter. Documented impacts include potential integrity compromise with no confidentiality or availability impact per N...

[UNIX] OpenAutoClassifieds Cross-Site Scripting Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

Mewsoft Auction, PHP Classifieds and eFax.com - CrossSiteScripting issues

Advisory name: SSI & CSS execution in Mewsoft Auction, PHP Classifieds and eFax.com Application: Mewsoft Auction Perl script, PHP Classifieds PHP, eFax.com ASP Date: 14.6.2002 Impact: remote user can execute shell commands & cross site scripting =====================================...

PHP Classifieds 6.0.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5022/info PHP Classifieds has been reported to be prone to cross-site scripting attacks. Attackers may inject arbitrary HTML or script code into URI parameters in a malicious link. When the malicious link is visited, the attacker's script code will be...