Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2003-1520

Published: 31/12/2003 Updated: 05/09/2008
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Fuzzymonkey

Vulnerability Summary

SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote malicious users to execute arbitrary SQL commands via the email parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

fuzzymonkey myclassifieds 2.11

Exploits

Exploit DB: FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection
source: wwwsecurityfocuscom/bid/8863/info It has been reported that FuzzyMonkey MyClassifieds may be prone to a SQL injection vulnerability that may allow an attacker to disclose user passwords by supplying malicious SQL code to the Email variable This attack may cause the software to write user password to a world readable file, which m ...

References

CWE-89http://www.securityfocus.com/archive/1/341908http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changeshttp://www.securityfocus.com/bid/8863http://securityreason.com/securityalert/3293https://nvd.nist.govhttps://www.exploit-db.com/exploits/23269/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook