9 matches found
CVE-2017-17567
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
Sql injection
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
CVE-2017-17568
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...
CVE-2017-17567
CVE-2017-17567 affects Scubez Posty Readymade Classifieds. A SQL injection exists in admin/user_activate_submit.php where the ID parameter is unsafely handled, enabling remote SQL command injection with no authentication and no user interaction. Documented impact includes HIGH confidentiality ris...
CVE-2017-17568
CVE-2017-17568 affects Scubez Posty Readymade Classifieds, with an incorrect access control flaw on the admin/user_activate_submit.php backend script. The underlying issue allows remote attackers to obtain sensitive information via a direct request. Documents indicate potential information disclo...
CVE-2017-17569
CVE-2017-17569 affects Scubez Posty Readymade Classifieds, where the admin/user_activate_submit.php ID parameter triggers a cross-site scripting (XSS) vulnerability. The root cause is reflected XSS via the ID parameter, allowing injection of arbitrary script/HTML (CNVD-2018-00534 notes the issue ...
CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
CVE-2017-17568: Incorrect Permission Assignment for Critical Resource
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...