Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2008-5806
Disclosure Date: December 31, 2008 (last updated October 04, 2023)
SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2008-5805
Disclosure Date: December 31, 2008 (last updated October 04, 2023)
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.
0
Attacker Value
Unknown
CVE-2006-5828
Disclosure Date: November 10, 2006 (last updated October 04, 2023)
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
0
Attacker Value
Unknown
CVE-2006-1532
Disclosure Date: March 30, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter.
0
Attacker Value
Unknown
CVE-2006-0719
Disclosure Date: February 15, 2006 (last updated February 22, 2025)
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter.
0
