3 matches found
CVE-2007-3356
CVE-2007-3356 affects NetClassifieds Premium Edition. The vulnerability arises from error reporting paths that disclose sensitive information: (1) in Common.php and (2) imageresizer.php via display_errors, (3) use of FILE in error reporting by imageresizer.php, and (4) through requests that revea...
CVE-2007-3354
CVE-2007-3354 relates to multiple SQL injection vulnerabilities in NetClassifieds Premium Edition. The NVD entry states remote attackers can execute arbitrary SQL via the s_user_id parameter to ViewCat.php and other unspecified vectors. The entry also notes that certain CatID/ViewCat.php, CatID/g...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...