7.5
CVSSv2

CVE-2008-5805

Published: 31/12/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.

Vulnerable Product Search on Vulmon Subscribe to Product

deltascripts php classifieds 6.04

deltascripts php classifieds 6.0.5

deltascripts php classifieds

deltascripts php classifieds 6.20

deltascripts php classifieds 7.1

deltascripts php classifieds 7.0

deltascripts php classifieds 7.2

deltascripts php classifieds 7.3

deltascripts php classifieds 6.19

deltascripts php classifieds 6.18

Exploits

[~] deltascripts phpclassifieds Remote Sql inj [~] [~] detailphp (siteid) [~] [~] ---------------------------------------------------------- [~] Discovered By: ZoRLu [~] [~] Date: 06112008 [~] [~] Home: wwwz0rlublogspotcom [~] [~] contact: trt-turk@hotmailcom [~] [~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( [~] [~] ------------ ...