Published: 17/08/2009 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 460

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
68 classifieds 68 classifieds 4.1

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allo ...

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This ...

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may ...

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This ma ...

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow ...

source: wwwsecurityfocuscom/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may al ...

CWE-79 http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt http://www.osvdb.org/56565 http://www.osvdb.org/56569 http://www.osvdb.org/56567 http://www.osvdb.org/56568 http://www.osvdb.org/56564 http://www.osvdb.org/56566 http://secunia.com/advisories/36034 https://exchange.xforce.ibmcloud.com/vulnerabilities/52071 https://nvd.nist.gov https://www.exploit-db.com/exploits/33198/

CVE-2009-2780

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect