Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2008-5806

Disclosure Date: December 31, 2008 (last updated October 04, 2023)
SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information.
0
0
Attacker Value
Unknown

CVE-2008-5805

Disclosure Date: December 31, 2008 (last updated October 04, 2023)
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.
0
0
Attacker Value
Unknown

CVE-2007-2254

Disclosure Date: April 25, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.
0
0
Attacker Value
Unknown

CVE-2006-3330

Disclosure Date: June 30, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php.
0
0
Attacker Value
Unknown

CVE-2006-3329

Disclosure Date: June 30, 2006 (last updated October 04, 2023)
SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter.
0
0