deltascripts php classifieds vulnerabilities and exploits

(subscribe to this query)

755

VMScore

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party informa...

Deltascripts Php Classifieds 6.19 Deltascripts Php Classifieds 6.18 Deltascripts Php Classifieds 7.2 Deltascripts Php Classifieds 7.3 Deltascripts Php Classifieds 7.1 Deltascripts Php Classifieds 6.04 Deltascripts Php Classifieds 6.0.5 Deltascripts Php Classifieds Deltascripts Php Classifieds 6.20 Deltascripts Php Classifieds 7.0

1 EDB exploit

755

VMScore

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.

Deltascripts Php Classifieds 6.04 Deltascripts Php Classifieds 6.0.5 Deltascripts Php Classifieds Deltascripts Php Classifieds 6.20 Deltascripts Php Classifieds 7.1 Deltascripts Php Classifieds 7.0 Deltascripts Php Classifieds 7.2 Deltascripts Php Classifieds 7.3 Deltascripts Php Classifieds 6.19 Deltascripts Php Classifieds 6.18

1 EDB exploit

755

VMScore

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the user_id parameter.

Deltascripts Php Classifieds 6.0.5 Deltascripts Php Classifieds 6.18 Deltascripts Php Classifieds 6.20 Deltascripts Php Classifieds 7.1

1 EDB exploit

755

VMScore

SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 up to and including 6.20 allows remote malicious users to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter.

Deltascripts Php Classifieds 6.18 Deltascripts Php Classifieds 6.19 Deltascripts Php Classifieds 6.20

1 EDB exploit

383

VMScore

Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote malicious users to inject arbitrary web script or HTML via the searchword parameter.

Deltascripts Php Classifieds 6.18 Deltascripts Php Classifieds 6.20

755

VMScore

PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote malicious users to execute arbitrary PHP code via a URL in the lang_path parameter.

Deltascripts Php Classifieds 7.3

1 EDB exploit

605

VMScore

Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote malicious users to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to iss...

Deltascripts Php Classifieds 6.04

435

VMScore

Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote malicious users to execute arbitrary script as other users via the URL parameter.

Deltascripts Php Classifieds 6.0.5

1 EDB exploit

668

VMScore

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote malicious users to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" ...

Deltascripts Php Classifieds 6.04

668

VMScore

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote malicious users to execute arbitrary PHP code via a URL in the set_path parameter.

Deltascripts Php Classifieds 7.1

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook