Sql injection

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17567

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17569

CVE-2017-17569 affects Scubez Posty Readymade Classifieds, where the admin/user_activate_submit.php ID parameter triggers a cross-site scripting (XSS) vulnerability. The root cause is reflected XSS via the ID parameter, allowing injection of arbitrary script/HTML (CNVD-2018-00534 notes the issue ...

CVE-2017-17567

CVE-2017-17567 affects Scubez Posty Readymade Classifieds. A SQL injection exists in admin/user_activate_submit.php where the ID parameter is unsafely handled, enabling remote SQL command injection with no authentication and no user interaction. Documented impact includes HIGH confidentiality ris...

CVE-2017-17568

CVE-2017-17568 affects Scubez Posty Readymade Classifieds, with an incorrect access control flaw on the admin/user_activate_submit.php backend script. The underlying issue allows remote attackers to obtain sensitive information via a direct request. Documents indicate potential information disclo...

CVE-2017-17568

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...