Phpbazar@2.0.2 Security Vulnerabilities and Issues — Phpbazar@2.0.2 CVE List

Lucene search

SmartisoftPhpbazar2.0.2

3 matches found

CVE•added 2009/12/07 5:30 p.m.•46 views

CVE-2009-4221

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767.

7.5CVSS8.3AI score0.0035EPSS

CVE•added 2009/12/07 5:30 p.m.•43 views

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request.

7.5CVSS6.9AI score0.01498EPSS

CVE•added 2008/08/22 4:41 p.m.•33 views

CVE-2008-3767

SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter.

7.5CVSS8.2AI score0.00172EPSS