CVE-2008-2453

CVE-2008-2453 affects the PHP Classifieds Script, with two SQL injection flaws: the fatherID parameter in browse.php and search.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Impact is described as remote arbitrary SQL execution with partial confidentiality/i...

CVE-2008-7080

The CVE refers to CVE-2008-7080 in Team PHP PHP Classifieds Script, where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to obtain database credentials via a direct request to admin/backup/datadump.sql. The NVD entry lists a medium severity...