CVE-2009-2591

CVE-2009-2591 concerns SQL injection in the MyAnnonces module for E-Xoopport 3.1. The vulnerability affects the viewannonces action (index.php) where the lid parameter can be manipulated to execute arbitrary SQL commands. This allows remote attackers to interact with the database, with the NVD en...

CVE-2008-0878

CVE-2008-0878 describes an SQL injection in the MyAnnonces 1.7 and earlier module for RunCMS. The vulnerability is triggered via the cid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score is 7.5 (HIGH) with network attack, low complexity, no...