CVE-2026-113381

A SQL injection vulnerability exists in Osclass up to version 8.3.1 . The flaw is located within the Item Model Handler component, specifically in the Item::findUserItems function of the file oc-includes/osclass/model/Item.php. The root cause is the improper handling of the sPattern argument, whi...

CVE-2026-113381 Osclass Item Model Item.php findUserItems sql injection

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

EUVD-2026-104877

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

PT-2026-118314

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

CVE-2012-0974

Multiple cross-site scripting XSS vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sCity, 2 sPattern, 3 sPriceMax, and 4 sPriceMin parameters in a search action to...

CVE-2012-0974: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sCity, 2 sPattern, 3 sPriceMax, and 4 sPriceMin parameters in a search action to...

PT-2012-2980

Name of the Vulnerable Software and Affected Versions OSClass versions prior to 2.3.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the getParam function. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...