5 matches found
CVE-2007-3355
Technical details about CVE-2007-3355 are not publicly provided in the supplied documents. The entries repeat generic XSS vulnerability in NetClassifieds Premium Edition without specifics on affected versions, vectors, or fixes. Monitor for updates.
CVE-2007-3356
CVE-2007-3356 affects NetClassifieds Premium Edition. The vulnerability arises from error reporting paths that disclose sensitive information: (1) in Common.php and (2) imageresizer.php via display_errors, (3) use of FILE in error reporting by imageresizer.php, and (4) through requests that revea...
CVE-2007-3354
CVE-2007-3354 relates to multiple SQL injection vulnerabilities in NetClassifieds Premium Edition. The NVD entry states remote attackers can execute arbitrary SQL via the s_user_id parameter to ViewCat.php and other unspecified vectors. The entry also notes that certain CatID/ViewCat.php, CatID/g...
CVE-2007-3357
CVE-2007-3357 affects NetClassifieds Premium Edition. The vulnerability is a design/logic flaw where stored passwords and other sensitive data are not encrypted, creating potential information disclosure via unspecified vectors. The NVD entry assigns a base score of 10.0 (HIGH) with network attac...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...