CVE-2008-3672

CVE-2008-3672 is a SQL injection vulnerability in PozScripts Classified Ads, affecting the showcategory.php handler (cid parameter). The vulnerability arises from user-controlled input not being properly sanitized, enabling remote attackers to craft arbitrary SQL commands. The vulnerability is do...

CVE-2008-3673

PozScripts Classified Ads is affected by a SQL injection in browsecats.php, exploitable via the cid parameter (remote, network vector). Root cause: insufficient input handling of cid leading to arbitrary SQL execution; this is a different vector from CVE-2008-3672. The NVD entry CVE-2008-3673 rep...