Posty Readymade Classifieds Script SQL Injection Vulnerability

Posty Readymade Classifieds Script is a bulletin type website script by Posty India. A security vulnerability exists in Posty Readymade Classifieds Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending a listings.php?catid= or ads-details.php?ID= request...

Scubez Posty Readymade Classifieds SQL Injection Vulnerability

Posty Scubez Posty Readymade Classifieds is a suite of announcement-based website scripts from Posty India. A SQL injection vulnerability exists in Posty Scubez Posty Readymade Classifieds. A remote attacker can exploit this vulnerability by sending the 'ID' parameter to the...

Posty Scubez Posty Readymade Classifieds Unauthorized Access Vulnerability

Posty Scubez Posty Readymade Classifieds is a suite of announcement-based website scripts from Posty India. A security vulnerability exists in Posty Scubez Posty Readymade Classifieds, which stems from the program's failure to perform proper access control on access to the...

Sql injection

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17569

CVE-2017-17569 affects Scubez Posty Readymade Classifieds, where the admin/user_activate_submit.php ID parameter triggers a cross-site scripting (XSS) vulnerability. The root cause is reflected XSS via the ID parameter, allowing injection of arbitrary script/HTML (CNVD-2018-00534 notes the issue ...

CVE-2017-17568

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...

CVE-2017-17569

Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...

PT-2017-14863

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...

PT-2017-14861

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to SQL Injection, which occurs via the ID parameter in the "admin/user activate submit.php" API endpoint. Recommendations For Scubez Posty...

PT-2017-14862

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to incorrect access control in the backend PHP script, specifically when visiting the admin/user activate submit.php endpoint. This might allow...

CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17568: Incorrect Permission Assignment for Critical Resource

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...

CVE-2017-17569: Improper Neutralization of Input During Web Page Generation

Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...

PT-2017-14717

Name of the Vulnerable Software and Affected Versions Posty Readymade Classifieds Script version 1.0 Description The issue allows an attacker to inject SQL commands via specific requests, such as "listings.php?catid=" or "ads-details.php?ID=". This could potentially lead to unauthorized access or...

CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...

Readymade Classifieds Script 1.0 - SQL Injection

Readymade Classifieds Script 1.0 - SQL Injection Exploit Title: Readymade Classifieds Script 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.posty.in/index.html Demo: http://www.posty.in/readymade-classifieds-demo.html Version: 1.0...